CVE-2021-26963: 
NixOS vulnerability analysis and mitigation

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to full system compromise (Vendor Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 7.2 HIGH with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The vulnerability affects the CLI component of AirWave Management Platform and allows authenticated remote users to execute arbitrary commands with root privileges (NVD).

A successful exploitation of this vulnerability could result in complete system compromise, as the attacker would be able to execute arbitrary commands with root privileges on the underlying operating system. This could lead to unauthorized access to sensitive data, system modification, and potential disruption of services (Vendor Advisory).

The vulnerability requires authentication for exploitation, indicating that an attacker would need valid credentials to exploit it. The attack complexity is rated as Low, suggesting that the attack can be performed without significant specialized conditions (NVD).

The vendor has released version 8.2.12.0 to address this vulnerability. Users are advised to upgrade to this version or later to mitigate the risk (Vendor Advisory).