CVE-2019-5326

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-27 · updated 2026-06-17
Weakness: CWE-502

Description

An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform. This is possible due to the ability to overwrite a file on disk which is subsequently deserialized by the Java application component.

Affected products

Aruba AirWave Management Platform: from 8.0.0 before 8.2.10.1 — fixed in 8.2.10.1

How to fix

Upgrade to a fixed version: Aruba AirWave Management Platform 8.2.10.1. Check the vendor advisory for mitigations.

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-002.txt
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-002.txt

Get alerted when CVE-2019-5326 or the next vulnerability affects your stack