Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7051 State: PUBLISHED Published: 2018-02-15T20:00:00 Last Updated: 2024-08-05T06:17:17.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_02.txt - https://lists.debian.org/debian-lts-announce/2018/03/msg00021.html - http://openwall.com/lists/oss-security/2018/02/15/1 - https://usn.ubuntu.com/3590-1/
CVE ID: CVE-2018-7052 State: PUBLISHED Published: 2018-02-15T20:00:00 Last Updated: 2024-08-05T06:17:17.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_02.txt - http://openwall.com/lists/oss-security/2018/02/15/1 - https://usn.ubuntu.com/3590-1/
CVE ID: CVE-2018-7053 State: PUBLISHED Published: 2018-02-15T20:00:00 Last Updated: 2024-08-05T06:17:17.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_02.txt - http://openwall.com/lists/oss-security/2018/02/15/1 - https://usn.ubuntu.com/3590-1/
CVE ID: CVE-2018-7054 State: PUBLISHED Published: 2018-02-15T20:00:00 Last Updated: 2024-08-05T06:17:17.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_02.txt - http://openwall.com/lists/oss-security/2018/02/15/1 - https://usn.ubuntu.com/3590-1/ - https://usn.ubuntu.com/4046-1/
CVE ID: CVE-2018-7055 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T06:17:17.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.cl/2018/02/steelcase-sala-por-favor-y-todos-tus.html
CVE ID: CVE-2018-7056 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T06:17:17.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.cl/2018/02/steelcase-sala-por-favor-y-todos-tus.html
CVE ID: CVE-2018-7057 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T06:17:17.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.cl/2018/02/steelcase-sala-por-favor-y-todos-tus.html
CVE ID: CVE-2018-7058 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.489Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Problem Types: authentication bypass can lead to server compromise Description: Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system. The vulnerability is exposed only on ClearPass web interfaces, including administrative, guest captive portal, and API. Customers who do not expose ClearPass web interfaces to untrusted users are impacted to a lesser extent. Additional Analyst Not
rs who do not expose ClearPass web interfaces to untrusted users are impacted to a lesser extent. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt
CVE ID: CVE-2018-7059 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could use this vulnerability to obtain cluster credentials which could allow privilege escalation. This vulnerability is only present when authenticated as a user with "mon" permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt
CVE ID: CVE-2018-7060 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.380Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Problem Types: authenticated sessions are vulnerable to cross site request forgery (CSRF) Description: Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt
CVE ID: CVE-2018-7061 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2018-7062 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2018-7063 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T06:17:17.407Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: remote access restriction bypass Description: In Aruba ClearPass, disabled API admins can still perform read/write operations. In certain circumstances, API admins in ClearPass which have been disabled may still be able to perform read/write operations on parts of the XML API. This can lead to unauthorized access to the API and complete compromise of the ClearPass instance if an attacker knows of the existence of these accounts. Additional Analyst Notes: - CVE Program Container: References: - h
an attacker knows of the existence of these accounts. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-007.txt
CVE ID: CVE-2018-7064 State: PUBLISHED Published: 2019-05-10T17:10:32 Last Updated: 2024-08-05T06:17:17.456Z Vendors: n/a Products: Aruba Instant (IAP) Problem Types: Reflected Cross-Site Scripting Description: A reflected cross-site scripting (XSS) vulnerability is present in an unauthenticated Aruba Instant web interface. An attacker could use this vulnerability to trick an IAP administrator into clicking a link which could then take administrative actions on the Instant cluster, or expose the session cookie for an administrative session. Workaround: Administrators should make sure they log out of the Aruba Instant UI when not actively managing the system, and should use caution clicking l
make sure they log out of the Aruba Instant UI when not actively managing the system, and should use caution clicking links from external sources while logged into the IAP administrative interface. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0 Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-001.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-549547.pdf - http://www.securityfocus.com/bid/108374
CVE ID: CVE-2018-7065 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T06:17:17.414Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: SQL Injection Description: An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this vulnerability to gain access to "appadmin" credentials, leading to complete cluster compromise. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix. Additional Analyst Notes: - CVE Program
ng to complete cluster compromise. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-007.txt
CVE ID: CVE-2018-7066 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T06:17:17.529Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: remote command execution Description: An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators to link other network devices into ClearPass for the purpose of collecting enhanced information about connected endpoints. A defect in the API could allow a remote attacker to execute arbitrary commands on one of the linked devices. This vulnerability is only applicable if credentials for devices have
e arbitrary commands on one of the linked devices. This vulnerability is only applicable if credentials for devices have been supplied to ClearPass under Configuration -> Network -> Devices -> CLI Settings. Resolution: Fixed in 6.7.5 and 6.6.10-hotfix. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-007.txt
CVE ID: CVE-2018-7067 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T06:17:17.496Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: remote authentication bypass Description: A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass could allow an attacker to compromise the entire cluster through a specially crafted API call. Network access to the administrative web interface is required to exploit this vulnerability. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix. Additional Analyst Notes: - CVE Program Container: References: - ht
ility. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-007.txt
CVE ID: CVE-2018-7068 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.456Z Vendors: Hewlett Packard Enterprise Products: HPE CentralView Fraud Risk Management Problem Types: remote HOST header attack Description: HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us
CVE ID: CVE-2018-7069 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.341Z Vendors: Hewlett Packard Enterprise Products: HPE CentralView Fraud Risk Management Problem Types: remote unathenticated access to files Description: HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us
CVE ID: CVE-2018-7070 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.381Z Vendors: Hewlett Packard Enterprise Products: HPE CentralView Fraud Risk Management Problem Types: remote disclosure of information Description: HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us
CVE ID: CVE-2018-7071 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.411Z Vendors: Hewlett Packard Enterprise Products: HPE Network Function Virtualization Director (NFVD) Problem Types: remote unauthorized access to sensitive information Description: HPE has identified a remote access to sensitive information vulnerability in HPE Network Function Virtualization Director (NFVD) 4.2.1 prior to gui patch 3. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03853en_us
CVE ID: CVE-2018-7072 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.469Z Vendors: Hewlett Packard Enterprise Products: HPE Moonshot Provisioning Manager Problem Types: remote bypass of security restrictions Description: A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-15 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03843en_us
CVE ID: CVE-2018-7073 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.440Z Vendors: Hewlett Packard Enterprise Products: HPE Moonshot Provisioning Manager Problem Types: local arbitrary file modification Description: A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-15 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03843en_us
CVE ID: CVE-2018-7074 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.415Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (IMC) Problem Types: remote code execution Description: A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03864en_us - http://www.securitytracker.com/id/1041354
CVE ID: CVE-2018-7075 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.462Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (IMC) Problem Types: cross site scripting (XSS) Description: A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03863en_us
CVE ID: CVE-2018-7076 State: PUBLISHED Published: 2018-10-17T13:00:00Z Last Updated: 2024-09-16T19:20:31.968Z Vendors: Hewlett Packard Enterprise Products: HPE intelligence Management Center (iMC) PLAT Problem Types: remote code execution Description: A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03901en_us
CVE ID: CVE-2018-7077 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.400Z Vendors: Hewlett Packard Enterprise Products: HPE XP P9000 Command View Advanced Edition (CVAE) Problem Types: Local and Remote Unauthorized Access to Sensitive Information Description: A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior to 8.6.0-00) could be exploited to allow local and remote unauthorized access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale
ditional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03860en_us
CVE ID: CVE-2018-7078 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.478Z Vendors: Hewlett Packard Enterprise Products: HPE Integrated Lights-Out 4 (iLO 4), HPE Integrated Lights-Out 5 (iLO 5) Problem Types: remote code execution Description: A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03844en_us - http://www.securitytracker.com/id/1041188
CVE ID: CVE-2018-7079 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T06:17:17.393Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: remote access restriction bypass Description: Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privilege users to view, modify, or delete guest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix. Additional Analyst Notes: - CVE Program Container: References:
uest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-007.txt
CVE ID: CVE-2018-7080 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T06:17:17.458Z Vendors: Hewlett Packard Enterprise Products: Aruba Access Points Problem Types: remote access restriction bypass Description: A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points. An attacker who is able to exploit the vulnerability could install new, potentially malicious firmware into the AP's BLE radio and could then gain access to the AP's console port. This vulnerability is applicable only if the BLE radio has been enabled in affected access points. The BLE radio is disabled by default. Note - Aruba products are NOT affected by
been enabled in affected access points. The BLE radio is disabled by default. Note - Aruba products are NOT affected by a similar vulnerability being tracked as CVE-2018-16986. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105814 - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-006.txt
CVE ID: CVE-2018-7081 State: PUBLISHED Published: 2019-09-13T16:49:09 Last Updated: 2024-08-05T06:17:17.386Z Vendors: n/a Products: Aruba Mobility Controllers Problem Types: remote code execution Description: A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code within the underlying operating system with full system privileges. Such an attack could lead to complete system compromise. The ability to transmit traffic to an IP interface on the mobility contro
tack could lead to complete system compromise. The ability to transmit traffic to an IP interface on the mobility controller is required to carry out an attack. The attack leverages the PAPI protocol (UDP port 8211). If the mobility controller is only bridging L2 traffic to an uplink and does not have an IP address that is accessible to the attacker, it cannot be attacked. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt - https://x-c3ll.github.io/posts/CVE-2018-7081-RCE-ArubaOS/
CVE ID: CVE-2018-7082 State: PUBLISHED Published: 2019-05-10T16:49:16 Last Updated: 2024-08-05T06:17:17.467Z Vendors: n/a Products: Aruba Instant (IAP) Problem Types: Authenticated command injection Description: A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. Workaround: None. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0 Additional Analyst Notes: - CVE Program Container: References: - https://www.aru
.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0 Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-001.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-549547.pdf - http://www.securityfocus.com/bid/108374
CVE ID: CVE-2018-7083 State: PUBLISHED Published: 2019-05-10T16:43:30 Last Updated: 2024-08-05T06:17:17.503Z Vendors: n/a Products: Aruba Instant (IAP) Problem Types: Core dumps are publicly accessible Description: If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed. It was discovered that core dumps are stored in a way that unauthenticated users can access them through the Aruba Instant web interface. Core dumps could contain sensitive information such as keys and passwords. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba
swords. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0 Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-001.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-549547.pdf - http://www.securityfocus.com/bid/108374
CVE ID: CVE-2018-7084 State: PUBLISHED Published: 2019-05-10T17:14:37 Last Updated: 2024-08-05T06:17:17.528Z Vendors: n/a Products: Aruba Instant (IAP) Problem Types: Unauthenticated command execution Description: A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.1