VULNERABILITY INTELLIGENCE
CVE-2024-42501
CVSS score7.2 HIGH
EPSS probability1.17%
CISA KEVNot currently listed
Published2024-09-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22