CVE-2014-5342
HighSummary
Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 is vulnerable to remote command execution by attackers via unspecified vectors. This is a different vulnerability than CVE-2014-6627.
Risk Assessment
Attackers can execute arbitrary commands remotely, potentially leading to system compromise and data leakage. This poses a significant security risk to the organization.
Recommendation
It is recommended to update ClearPass to version 6.3.5 or 6.4.1 and to monitor the system for unauthorized activities.
Other vulnerabilities in Aruba Networks ClearPass
See all- CVE-2014-6627High
Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors. This is a different vulnerability than CVE-2014-5342.
- CVE-2014-6626High
Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, allowing remote attackers to bypass authentication and execute administrative actions via unknown vectors.
- CVE-2014-6625High
The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecified vectors.
Original NVD description (English source)
Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-6627.