Unscored severity · published Nov 25, 2014
CVE-2014-8368
The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified…
–
CVSS
2.8%
EPSS
No
On KEV
Description
The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Airwave · Arubanetworks
7.7.0 before 7.7.14; 8.0.0 before 8.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8368
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8368
Third Party Advisory
http://secunia.com/advisories/62578
Vendor Advisory
http://www.arubanetworks.com/support/alerts/aid-11192014.txt
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98871
More from Airwave
9.8
CVE-2016-2031
Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which…
8.8
CVE-2021-25167
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1
8.8
CVE-2021-25166
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1
8.8
CVE-2021-25151
A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1
8.8
CVE-2021-26961
A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0