CVE-2015-1388

EUVD-2015-1525
The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
arubanetworksarubaos
𝑥
≤ 6.2.3.9
arubanetworksarubaos
6.1.3.0
arubanetworksarubaos
6.1.3.1
arubanetworksarubaos
6.1.3.2
arubanetworksarubaos
6.1.3.3
arubanetworksarubaos
6.1.3.4
arubanetworksarubaos
6.1.3.5
arubanetworksarubaos
6.1.3.6
arubanetworksarubaos
6.1.3.7
arubanetworksarubaos
6.1.3.8
arubanetworksarubaos
6.1.3.9
arubanetworksarubaos
6.2.3.1
arubanetworksarubaos
6.2.3.2
arubanetworksarubaos
6.2.3.3
arubanetworksarubaos
6.2.3.4
arubanetworksarubaos
6.2.3.5
arubanetworksarubaos
6.2.3.6
arubanetworksarubaos
6.2.3.7
arubanetworksarubaos
6.2.3.8
arubanetworksarubaos
6.3.0.0
arubanetworksarubaos
6.3.1
arubanetworksarubaos
6.3.1.1
arubanetworksarubaos
6.3.1.2
arubanetworksarubaos
6.3.1.3
arubanetworksarubaos
6.3.1.4
arubanetworksarubaos
6.3.1.5
arubanetworksarubaos
6.3.1.6
arubanetworksarubaos
6.3.1.7
arubanetworksarubaos
6.3.1.8
arubanetworksarubaos
6.3.1.9
arubanetworksarubaos
6.3.1.10
arubanetworksarubaos
6.3.1.11
arubanetworksarubaos
6.3.1.12
arubanetworksarubaos
6.3.1.13
arubanetworksarubaos
6.3.1.14
arubanetworksarubaos
6.4.2.3
arubanetworksarubaos
6.4.2.4
arubanetworksarubaos
6.4.2.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-004.txt
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-004.txt