CVE-2014-2593

CRITICAL 9.0CVE-2014-2593 · Published 29/08/2014 · updated 17/06/2026

In short

CVE-2014-2593 is a CRITICAL (CVSS 9.0) vulnerability affecting clearpass policy manager (arubanetworks).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
clearpass policy manager arubanetworks	`= 6.3.0.60730`	No fix yet

Description

The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.

References

More vulnerabilities in clearpass policy manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

clearpass policy manager

arubanetworks

= 6.3.0.60730

No fix yet

More vulnerabilities in clearpass policy manager

See all →