Vulnerability Details CVE-2019-5323
There are command injection vulnerabilities present in the AirWave application. Certain input fields controlled by an administrative user are not properly sanitized before being parsed by AirWave. If conditions are met, an attacker can obtain command execution on the host.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.2%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
References
Products affected by CVE-2019-5323
-
cpe:2.3:a:arubanetworks:airwave:8.0.0
-
cpe:2.3:a:arubanetworks:airwave:8.0.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.10
-
cpe:2.3:a:arubanetworks:airwave:8.0.11
-
cpe:2.3:a:arubanetworks:airwave:8.0.11.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.11.2
-
cpe:2.3:a:arubanetworks:airwave:8.0.2
-
cpe:2.3:a:arubanetworks:airwave:8.0.3
-
cpe:2.3:a:arubanetworks:airwave:8.0.3.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.4
-
cpe:2.3:a:arubanetworks:airwave:8.0.4.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.5
-
cpe:2.3:a:arubanetworks:airwave:8.0.6
-
cpe:2.3:a:arubanetworks:airwave:8.0.6.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.6.2
-
cpe:2.3:a:arubanetworks:airwave:8.0.6.3
-
cpe:2.3:a:arubanetworks:airwave:8.0.7
-
cpe:2.3:a:arubanetworks:airwave:8.0.7.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.8
-
cpe:2.3:a:arubanetworks:airwave:8.0.8.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.9
-
cpe:2.3:a:arubanetworks:airwave:8.0.9.1
-
cpe:2.3:a:arubanetworks:airwave:8.0.9.2
-
cpe:2.3:a:arubanetworks:airwave:8.2.0
-
cpe:2.3:a:arubanetworks:airwave:8.2.10.0
-
cpe:2.3:a:arubanetworks:airwave:8.2.3
-
cpe:2.3:a:arubanetworks:airwave:8.2.4
-
cpe:2.3:a:arubanetworks:airwave:8.2.5
-
cpe:2.3:a:arubanetworks:airwave:8.2.6
-
cpe:2.3:a:arubanetworks:airwave:8.2.6.1
-
cpe:2.3:a:arubanetworks:airwave:8.2.7
-
cpe:2.3:a:arubanetworks:airwave:8.2.7.1
-
cpe:2.3:a:arubanetworks:airwave:8.2.8.0
-
cpe:2.3:a:arubanetworks:airwave:8.2.8.1
-
cpe:2.3:a:arubanetworks:airwave:8.2.8.2
-
cpe:2.3:a:arubanetworks:airwave:8.2.9.0
-
cpe:2.3:a:arubanetworks:airwave:8.2.9.1