« Volver al listado

CVE-2014-7299

Estado: ModificadaAlta (7.5)—

Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Arubanetworks — Arubaos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-7299",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-10-08T01:55:06.143",
  "references": [
    {
      "url": "http://www.arubanetworks.com/support/alerts/aid-10072014.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.arubanetworks.com/support/alerts/aid-10072014.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en la interfaces de administración en ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, y 6.4.2.1-FIPS en los controladores Aruba permite a atacantes remotos evadir la autenticación, y obtener información potencialmente sensible o añadir cuentas de huéspedes, a través de una sesión SSH."
    }
  ],
  "lastModified": "2026-06-17T00:14:43.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:arubaos:6.3.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "898257E2-71D8-45B0-AEBA-489CA70DCE8A"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:arubaos:6.3.11:fips:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AC452B9-E2C9-40AB-A88C-ECDED327CD03"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:arubaos:6.4.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6AD2B98-94AF-4132-B92B-ECA4B5669AF6"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:arubaos:6.4.2.1:fips:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35BCB9B9-7E4A-438E-AB0C-E14AC0B326D5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}