Arubanetworks Airwave Glass vulnerabilities

12 CVEs affecting Arubanetworks Airwave Glass, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-24641, published 2021-01-15.

More from Arubanetworks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-24639, published 2021-01-15. Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days. There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation…
• CVE-2020-24638, published 2021-01-15. High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root…
• CVE-2020-24640, published 2021-01-15. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation…
• CVE-2020-7129, published 2020-11-04. High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days. A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
• CVE-2020-24632, published 2020-10-26. High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days. A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
• CVE-2020-24631, published 2020-10-26. High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days. A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
• CVE-2020-7128, published 2020-11-04. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
• CVE-2020-7127, published 2020-10-26. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
• CVE-2020-24641, published 2021-01-15. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive…
• CVE-2020-7125, published 2020-10-26. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.

Latest

• CVE-2020-7126, published 2020-10-26. Medium severity, CVSS 5.8. EPSS: 0.8% chance of exploitation in the next 30 days. A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
• CVE-2020-7124, published 2020-10-26. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.