CVE-2020-7128 - A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2

CRITICAL

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2

Published Nov 4, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.21%

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.

Vendor n/a Product Aruba Airwave Software Default
unknown
Affected
- Prior to 1.3.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Aruba Airwave Software	unknown	Affected Prior to 1.3.2

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28262		Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04051en_us		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hpe

Published Nov 4, 2020

Updated Aug 4, 2024

Reserved Jan 16, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner hpe

Published Nov 4, 2020

Updated Aug 4, 2024

GitHub

No data