CVE-2014-8368

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-25 · updated 2026-06-17
Weakness: CWE-264

Description

The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.

Affected products

Aruba AirWave Management Platform: from 7.7.0 before 7.7.14; from 8.0.0 before 8.0.5 — fixed in 7.7.14, 8.0.5

How to fix

Upgrade to a fixed version: Aruba AirWave Management Platform 7.7.14, 8.0.5. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/62578
http://www.arubanetworks.com/support/alerts/aid-11192014.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/98871
http://secunia.com/advisories/62578
http://www.arubanetworks.com/support/alerts/aid-11192014.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/98871

Get alerted when CVE-2014-8368 or the next vulnerability affects your stack