vulnerability
Aruba AOS-8: CVE-2024-42501: Authenticated Path Traversal Vulnerability Leads to a Remote Command Execution (RCE)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:M/C:C/I:C/A:C) | Sep 17, 2024 | Jan 14, 2025 | Apr 2, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:C)
Published
Sep 17, 2024
Added
Jan 14, 2025
Modified
Apr 2, 2026
Description
An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants.
Solution
aruba-aos-8-cve-2024-42501
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.