CVE-2014-2593
highpriority · track · 37EPSS 0.015 · 75 %ileEUUSEPSS · scored 2026-10-28
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
- arubanetworks clearpass policy manager= 6.3.0.60730nvdUScpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (14)
External citations — patches, advisories, analysis.
- http://osvdb.org/show/osvdb/109662cnnvd
- http://www.securityfocus.com/bid/69391cnnvd
- http://xforce.iss.net/xforce/xfdb/95491cnnvd
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2593cnnvd
- http://osvdb.org/show/osvdb/109662enisa_euvd
- http://www.arubanetworks.com/support/alerts/aid-050214.ascenisa_euvd
- http://www.securityfocus.com/bid/69391enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95491enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan