Aruba AirWave prior to 7.7.14.2 and 8.x prior to 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.
hp airwave
arubanetworks airwave