CVE-2014-2593
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users...
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
Exploit likelihood
What each source reports
NVD Score used
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
- Record
CVE-2014-2593- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
- Record
CVE-2014-2593- Updated
- 2026-11-02
EUVDEUVD-2014-2625 No score
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
- Record
EUVD-2014-2625- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-797g-c7cw-4p6g No score
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users...
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
- Record
GHSA-797g-c7cw-4p6g- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2593 is a high vulnerability (CVSS 9.0) in Arubanetworks Clearpass Policy Manager, published August 29, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 75th percentile. No source names a fixed version.
References
osvdb.org/show/osvdb/109662
arubanetworks.com/support/alerts/aid-050214.asc
exchange.xforce.ibmcloud.com/vulnerabilities/95491
portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2593
securityfocus.com/bid/69391
nvd.nist.gov/vuln/detail/CVE-2014-2593
github.com/advisories/GHSA-797g-c7cw-4p6g