Medium severity · published Sep 4, 2020
CVE-2020-7119
A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative…
4.9
CVSS
0.7%
EPSS
No
On KEV
Description
A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Analytics And Location Engine · Arubanetworks
2.1.0.0 before 2.1.0.3; 2.0.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-7119
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-7119
Vendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-008.txt
More from Analytics And Location Engine
9.8
CVE-2026-76709
Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)
9.8
CVE-2026-76708
Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)
7.5
CVE-2026-76711
Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE)
7.5
CVE-2026-76710
Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)
7.3
CVE-2026-76712
Unauthenticated Remote Unauthorized Access, Information Disclosure, and Denial of Service Vulnerabilities in HPE Networking Analytics and Location Engine (ALE)