CVE-2024-54008 — Authenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management Platform

CVE-2024-54008

Authenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management Platform PUBLISHED

Description (CNA)

An authenticated Remote Code Execution (RCE) vulnerability exists in the AirWave CLI. Successful exploitation of this vulnerability could allow a remote authenticated threat actor to run arbitrary commands as a privileged user on the underlying host.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking AirWave Management Platform	affected 8.0.0.0 through 8.3.0.3

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04765en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.