CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-24640

There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 78.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-001.txt
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-001.txt

Products affected by CVE-2020-24640

Arubanetworks » Airwave Glass » Version: N/A

cpe:2.3:a:arubanetworks:airwave_glass:-
Arubanetworks » Airwave Glass » Version: 1.2.1

cpe:2.3:a:arubanetworks:airwave_glass:1.2.1
Arubanetworks » Airwave Glass » Version: 1.3.0

cpe:2.3:a:arubanetworks:airwave_glass:1.3.0
Arubanetworks » Airwave Glass » Version: 1.3.1

cpe:2.3:a:arubanetworks:airwave_glass:1.3.1
Arubanetworks » Airwave Glass » Version: 1.3.2

cpe:2.3:a:arubanetworks:airwave_glass:1.3.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-24640

Products

Pricing

Contact Us