← Vulnerability feed

Vulnerability record · CVE-2017-9001 · published 6 August 2018

CVE-2017-9001: Hp aruba clearpass policy manager vulnerability

Hp · Aruba Clearpass Policy Manager

Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command execution vulnerability is present which could allow an unauthenticated user to execute arbitrary commands on the underlying operating system with "root" privilege level. This vulnerability is only present when a specific feature has been enabled. The SSH Lockout feature is not enabled by default, so only systems which have enabled this feature are vulnerable.

8.1 CVSS 3.0 High EPSS 7.3% · top 5.8%
8.1CVSS 3.0 base score, v2 9.3
7.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command execution vulnerability is present which could allow an unauthenticated user to execute arbitrary commands on the underlying operating system with "root" privilege level. This vulnerability is only present when a specific feature has been enabled. The SSH Lockout feature is not enabled by default, so only systems which have enabled this feature are vulnerable.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt MitigationVendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt MitigationVendor Advisory

Track CVE-2017-9001 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-7058Hp aruba clearpass policy manager improper authentication vulnerabilityAruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerabi…EPSS 3.9%9.8CVE-2017-5824Hp aruba clearpass policy manager vulnerabilityAn unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.EPSS 19%8.8CVE-2018-7059Hp aruba clearpass policy manager improper input validation vulnerabilityAruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permissi…EPSS 1.1%8.8CVE-2017-5825Hp aruba clearpass policy manager vulnerabilityA privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.EPSS 1.8%8.8CVE-2017-5826Hp aruba clearpass policy manager vulnerabilityAn authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.EPSS 3.3%8.1CVE-2017-5828Hp aruba clearpass policy manager xml external entity (xxe) vulnerabilityAn arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.EPSS 1.9%7.8CVE-2017-5829Hp aruba clearpass policy manager vulnerabilityAn access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.EPSS 0.59%7.5CVE-2018-5390Linux kernel TCP out-of-order queue processing denial of serviceLinux kernel versions 4.9 and later can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incomi…EPSS 74%analysed

Source: NIST National Vulnerability Database (record CVE-2017-9001), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.