CVE-2020-24638

—

CVSS 3.1

7.2 high

EPSS

3%p87

Published

Jan 15, 2021 (Jan 15, 2021)

Modified

Jun 17, 2026

Description

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system.

Vendors: arubanetworks
Products: airwave glass
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.