CVE-2017-8946 : A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0

A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found.

Published 2018-02-15 22:29:08

Updated 2018-03-15 15:15:36

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2017-8946

HP » Aruba Airwave Glass » Version: 1.0.1
cpe:2.3:o:hp:aruba_airwave_glass:1.0.1:*:*:*:*:*:*:*
Matching versions
HP » Aruba Airwave Glass » Version: 1.0.0
cpe:2.3:o:hp:aruba_airwave_glass:1.0.0:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.59%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 78 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.6	HIGH	AV:N/AC:H/Au:N/C:C/I:C/A:C	4.9	10.0	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
8.3	HIGH	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H	1.6	6.0	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: High Integrity: High Availability: High

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03751en_us

HPESBHF03751 rev.1 - HPE Aruba AirWave Glass, Remote Code Execution
Vendor Advisory
http://www.securityfocus.com/bid/98644

HP Aruba AirWave Glass CVE-2017-8946 Unspecified Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry

Jump to