{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T08:10:01.817","vulnerabilities":[{"cve":{"id":"CVE-2024-25614","sourceIdentifier":"security-alert@hpe.com","published":"2024-03-05T21:15:08.473","lastModified":"2026-06-17T07:16:17.877","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the controller. \n\n"},{"lang":"es","value":"Existe una vulnerabilidad de eliminación de archivos arbitraria en la CLI utilizada por ArubaOS. La explotación exitosa de esta vulnerabilidad da como resultado la capacidad de eliminar archivos arbitrarios en el sistema operativo subyacente, lo que podría provocar condiciones de denegación de servicio y afectar la integridad del controlador."}],"affected":[{"source":"security-alert@hpe.com","affectedData":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS Wi-Fi Controllers and Campus/Remote Access Points","defaultStatus":"affected","versions":[{"version":"ArubaOS 10.5.x.x: 10.5.0.1 and below","status":"affected"},{"version":"ArubaOS 10.4.x.x: 10.4.0.3 and below","status":"affected"},{"version":"ArubaOS 8.11.x.x: 8.11.2.0 and below","status":"affected"},{"version":"ArubaOS 8.10.x.x:  8.10.0.9 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-alert@hpe.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-06T16:13:05.103424Z","id":"CVE-2024-25614","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*","versionStartIncluding":"8.10.0.0","versionEndExcluding":"8.10.0.10","matchCriteriaId":"2697A3FE-2435-49E4-9E21-AB4F7D664D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*","versionStartIncluding":"8.11.0.0","versionEndExcluding":"8.11.2.1","matchCriteriaId":"5CAF4A34-8D72-4337-A761-FDB404816DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*","versionStartIncluding":"10.4.0.0","versionEndExcluding":"10.4.1.0","matchCriteriaId":"461A0E90-278E-4759-94C7-F18510AA9C13"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0.0","versionEndExcluding":"10.5.1.0","matchCriteriaId":"42E8AC1B-B80A-43C4-B4CE-C9CDF23E7DD3"}]}]}],"references":[{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-002.txt","source":"security-alert@hpe.com","tags":["Broken Link"]},{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}}]}