Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2020-7129

Quick assessment

Affected
n/a Aruba Airwave Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Aruba Networks Aruba Airwave是美国安移通网络（Aruba Networks）公司的一个可对有线无线网络进行可视、追踪、管理的软件。 Aruba Airwave Software 1.3.2之前版本中存在安全漏洞，未经身份验证的攻击者可以利用该漏洞进行远程执行任意命令。

AI Predicted 9.8 Difficulty: Easy EPSS 2.74% · P86

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-7129

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Aruba Networks Aruba Airwave 命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Aruba Networks Aruba Airwave是美国安移通网络（Aruba Networks）公司的一个可对有线无线网络进行可视、追踪、管理的软件。 Aruba Airwave Software 1.3.2之前版本中存在安全漏洞，未经身份验证的攻击者可以利用该漏洞进行远程执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- Aruba Airwave Software Prior to 1.3.2 -

II. Public POCs for CVE-2020-7129

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-7129

请登录查看更多情报信息。

Other References for CVE-2020-7129 (1)

Same Patch Batch · n/a · 2020-11-04 · 16 CVEs total

CVE-2020-28049 SDDM 竞争条件问题漏洞
CVE-2020-26167 FUEL CMS 信息泄露漏洞
CVE-2020-22278 phpMyAdmin 安全漏洞
CVE-2020-22276 WordPress 安全漏洞
CVE-2020-22277 WordPress 注入漏洞
CVE-2020-22275 Wordpress Plugin Easy Registration Forms 注入漏洞
CVE-2020-22273 Neoflex Video Subscription System 跨站请求伪造漏洞
CVE-2020-22274 Joomla 注入漏洞
CVE-2020-7128 Aruba Networks Aruba Airwave 命令注入漏洞
CVE-2019-7356 Subrion CMS 跨站脚本漏洞
CVE-2020-27689 Verve Connect VH510 信任管理问题漏洞
CVE-2020-27690 Verve Connect VH510 缓冲区错误漏洞
CVE-2020-27691 Verve Connect VH510 跨站脚本漏洞
CVE-2020-27692 Verve Connect VH510 跨站请求伪造漏洞
CVE-2020-25201 HashiCorp Consul 安全漏洞

IV. Related Vulnerabilities

Same product: Aruba Airwave Software
Same vendor: n/a

V. Comments for CVE-2020-7129

No comments yet

Leave a comment