vulnwire
8.8high

CVE-2016-8526in critical feed1 exploit

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE).

Published 8 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
10.1%
percentile 96%
Public exploits
1
Exploit-DB

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML parsers to access storage that exist on external systems. If an unprivileged user is permitted to control the contents of XML files, XXE can be used as an attack vector. Because the XML parser has access to the local filesystem and runs with the permissions of the web server, it can access any file that is readable by the web server and copy it to an external system of the attacker's choosing. This could include files that contain passwords, which could then lead to privilege escalation.

Exploit prediction (EPSS)

10.13% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-41482 Aruba AirWave 8.2.3 - XML External Entity Injection / Cross-Site Scripting · webapps · 2017-03-01

CVSS scores

Assigned byVersionScoreVector
NVD3.08.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.04.0AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

  • Hewlett Packard Enterprise Aruba AirWave

Classification

Weakness
  • CWE-611 Improper Restriction of XML External Entity Reference

References

  • securityfocus.com /bid/96495 · vdb-entry, x_refsource_BID, x_transferred
  • arubanetworks.com /assets/alert/ARUBA-PSA-2017-001.txt · x_refsource_CONFIRM, x_transferred
  • exploit-db.com /exploits/41482/ · exploit, x_refsource_EXPLOIT-DB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.