CVE-2020-24638: Arubanetworks Airwave Glass

High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days.

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system.

Affected products

• Arubanetworks Airwave Glass: before 1.3.3 (fixed in 1.3.3)

Published 2021-01-15. Last modified 2026-06-17.