CVE-2017-9001

CVE-2017-9001 describes an unauthenticated remote command execution vulnerability in Aruba ClearPass Policy Manager versions 6.6.3 and later, specifically when the "SSH Lockout" feature is enabled. This critical flaw allows an unauthenticated attacker to execute arbitrary commands with root privileges on the underlying operating system. While the CVSS score is 8.1 (HIGH) due to its network attack vector and high impact on confidentiality, integrity, and availability, the vulnerability is only present when a non-default feature is enabled, increasing attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.