Vulnerabilities > Arubanetworks > Airwave Glass > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-01-15 CVE-2020-24638 Unspecified vulnerability in Arubanetworks Airwave Glass
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli.
network
low complexity
arubanetworks
critical
9.0
2021-01-15 CVE-2020-24639 Deserialization of Untrusted Data vulnerability in Arubanetworks Airwave Glass
There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3.
network
low complexity
arubanetworks CWE-502
critical
10.0
2021-01-15 CVE-2020-24640 Unspecified vulnerability in Arubanetworks Airwave Glass
There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3.
network
low complexity
arubanetworks
critical
10.0
2020-11-04 CVE-2020-7128 Command Injection vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks CWE-77
critical
10.0
2020-11-04 CVE-2020-7129 Command Injection vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks CWE-77
critical
9.0
2020-10-26 CVE-2020-24631 Command Injection vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks CWE-77
critical
9.0
2020-10-26 CVE-2020-24632 Command Injection vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks CWE-77
critical
9.0