Arubaos
Monthly
ArubaOS access points are vulnerable to gateway impersonation attacks when clients connect via wired or wireless interfaces, allowing unauthenticated attackers to redirect network traffic into a man-in-the-middle position. An attacker can exploit address-based spoofing to intercept or modify data streams intended for the legitimate gateway, compromising the confidentiality of client communications. No patch is currently available.
Arubaos contains a vulnerability that allows attackers to bypass Layer 2 (L2) communication restrictions between clients and redirect traf (CVSS 4.3).
Arubaos contains a vulnerability that allows attackers to redirect intercepted traffic to facilitate machine-in-the-middle (MitM) attacks (CVSS 4.3).
Traffic interception in ArubaOS Wi-Fi networks allows adjacent attackers to bypass BSSID isolation controls and redirect victim traffic by exploiting port associations across multiple wireless networks. Successful attacks could enable eavesdropping, session hijacking, or denial of service without authentication or user interaction. No patch is currently available for this medium-severity vulnerability.
Malicious actors can install unauthorized Group Temporal Keys on ArubaOS wireless clients through a standardized roaming protocol vulnerability, enabling frame injection and network segmentation bypass. An attacker positioned on the local network could leverage this to intercept traffic, bypass client isolation, and compromise network integrity and confidentiality. No patch is currently available.
Improper cryptographic validation in ArubaOS Wi-Fi encryption allows adjacent network attackers to forge authenticated frames by spoofing the primary BSSID and inject tampered data to targeted clients without authentication. This medium-severity flaw (CVSS 5.4) bypasses standard encryption separation between wireless endpoints, enabling data manipulation on affected networks. No patch is currently available.
Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. [CVSS 5.3 MEDIUM]
Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. [CVSS 5.3 MEDIUM]
An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 operating systems. [CVSS 6.5 MEDIUM]
A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. [CVSS 6.5 MEDIUM]
Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. [CVSS 7.2 HIGH]
Arubaos contains a vulnerability that allows attackers to an authenticated malicious actor to create or modify arbitrary files and execute (CVSS 7.2).
An improper input handling vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. [CVSS 7.2 HIGH]
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. [CVSS 7.2 HIGH]
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. [CVSS 7.2 HIGH]
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. [CVSS 7.2 HIGH]
A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exploitation could allow an authenticated malicious actor to execute arbitrary code as a privileged user on the underlying operating system. [CVSS 7.2 HIGH]
Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. [CVSS 8.2 HIGH]
Command injection in the ArubaOS command line interface allows an authenticated remote attacker with low-privileged credentials to execute arbitrary commands on the underlying operating system, yielding full compromise of confidentiality, integrity, and availability on the affected device. The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and requires both network reachability to the management CLI and a valid low-privilege account - an unauthenticated attacker cannot exploit it. At time of analysis, no public exploit identified and EPSS is low at 0.10% (28th percentile), with no CISA KEV listing, so this is a credible operational priority for organizations running Aruba/HPE wireless infrastructure rather than an emergency.
A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacker to cause a denial of service. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Path traversal in the low-level interface library of ArubaOS exposes AOS-10 Gateway and AOS-8 Controller/Mobility Conductor deployments to arbitrary file download from the local filesystem. Exploitation is network-reachable (AV:N) but gated behind a high-privileged authenticated session (PR:H), so a successful attacker must already hold administrative or operator-level access to the affected device; impact is limited to confidentiality (file reads), with no integrity or availability effect. There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and the EPSS score of 0.45% (37th percentile) indicates low predicted exploitation activity.
Arbitrary file download in the AOS-10 Gateway and AOS-8 Controller/Mobility Conductor firmware exposes a path traversal flaw in a low-level interface library that lets an authenticated, high-privileged actor read files from the underlying operating system. Exploitation requires an existing administrative session or equivalent privileged credentials on the management plane (CVSS PR:H), so there is no unauthenticated path; the impact is limited to confidentiality (C:H) with no integrity or availability effect, and no public exploit code has been identified at time of analysis. With an EPSS score of 0.45% (37th percentile) and no CISA KEV listing, this is a moderate-priority hardening item whose real-world risk is governed almost entirely by how tightly management access to these appliances is restricted.
ArubaOS 10.x gateways and ArubaOS 8.x controllers/Mobility Conductors expose an arbitrary file download flaw in the web-based management interface, allowing an already-authenticated, high-privileged (PR:H) administrator to retrieve arbitrary files from the appliance via a specially crafted request. The assessed impact is confidentiality-only (CVSS 4.9, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N), so the practical risk is disclosure of sensitive files to someone who has already obtained administrative management credentials; EPSS is low at 0.38% (30th percentile), there is no CISA KEV listing, and no public exploit code has been identified at time of analysis. This is a moderate, not top-tier, priority.
An arbitrary file download flaw in the CLI binary of ArubaOS lets a privileged, authenticated attacker craft CLI commands that retrieve files they should not be able to read, giving full confidentiality exposure of on-device data. Only deployments running AOS-10 Gateway or AOS-8 Controller/Mobility Conductor code are affected, and the CVSS vector (PR:H, high privileges required) means the attacker must already hold operator/admin-level CLI access, so the realistic exploit population is small. There is no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is low at 0.35% (27th percentile), making this a high-scoring but moderate-likelihood issue whose main value to an adversary is post-compromise credential and configuration harvesting rather than initial access.
Authenticated high-privilege CLI users on Aruba AOS-10 Gateways and AOS-8 Controllers/Mobility Conductors can abuse the CLI binary's file-path handling to download arbitrary files from the underlying operating system, exposing configuration, credential, and key material to an actor who already holds elevated administrative access. The flaw is rated CVSS 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) and classified as CWE-284 improper access control, with impact limited to confidentiality because the attacker must first reach the CLI with HIGH privileges, and no integrity or availability effect is possible. No public exploit code has been identified at time of analysis and EPSS estimates a low 0.35% (27th percentile) probability of exploitation in the next 30 days, so this ranks as a moderate-severity hardening issue rather than an emergency patch.
Arbitrary file download in the CLI binary of HPE Aruba Networking ArubaOS (AOS-10 Gateway and AOS-8 Controller/Mobility Conductor) lets an authenticated, high-privilege CLI user retrieve files outside the intended download scope by crafting a specially constructed command, exposing sensitive local files to the attacker. The flaw is rated CVSS 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) and classified as CWE-284 improper access control; impact is limited to confidentiality, with no integrity or availability effect. EPSS is only 0.35% (27th percentile), there is no CISA KEV listing, and no public exploit identified at time of analysis; the primary barrier to exploitation is the requirement for an already privileged authenticated CLI session.
Authenticated command injection in the command-line interface binary of HPE Aruba Networking AOS-10 Gateways and AOS-8 Controllers/Mobility Conductors lets an attacker who already holds high-privilege CLI credentials and has physical access to the appliance hardware escape the restricted CLI and execute arbitrary commands as a privileged user on the underlying operating system. The flaw carries a CVSS v3.1 score of 6.2 (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), so although confidentiality, integrity and availability impact is rated High, the vector is gated by two strong preconditions - physical access to the controller hardware (AV:P) and high-privilege authenticated access to the CLI (PR:H) - keeping real-world risk low. No public exploit code has been identified at time of analysis, there is no CISA KEV listing, and EPSS is only 0.66% (50th percentile), consistent with a vulnerability that cannot be reached remotely.
Arbitrary file deletion in the Aruba AOS-8 Controller/Mobility Conductor command-line interface allows an authenticated remote attacker with high (administrative) privileges to remove arbitrary files on the affected system, impacting integrity and availability (CVSS 6.5, C:N/I:H/A:H). Affected deployments are ArubaOS-based controllers and Mobility Conductors; the PR:H vector means exploitation requires valid admin CLI credentials, narrowing risk to insiders or attackers who already compromised an administrative account. EPSS is low at 0.36% (28th percentile) and no public exploit identified at time of analysis.
ArubaOS 8.x controllers and Mobility Conductors permit an authenticated high-privilege CLI user to delete arbitrary files, degrading integrity and availability of the affected system. The issue is an improper access control flaw (CWE-284) with a CVSS 3.1 score of 6.5; the vector requires network reachability and high privileges (PR:H) with no user interaction, so unauthenticated or low-privileged attackers cannot exploit it directly. EPSS is low at 0.36% (28th percentile), no public exploit identified at time of analysis, and no confirmed active exploitation (CISA KEV) is reported.
Authenticated, highly privileged users of the ArubaOS command-line interface on AOS-8 Controllers and Mobility Conductors can delete arbitrary files on the device, degrading integrity and availability (CVSS 3.1 base 6.5, C:N/I:H/A:H). Exploitation requires valid administrative credentials plus network reachability to the management CLI (AV:N/AC:L/PR:H/UI:N), so real-world risk is concentrated in deployments where the management plane is broadly exposed rather than segmented or protected by MFA. No public exploit code and no CISA KEV listing were identified in the supplied intelligence, and EPSS is low at 0.36% (28th percentile), making this a moderate rather than top-tier priority.
Authenticated command injection in the ArubaOS (AOS-8) Controller and Mobility Conductor CLI allows a privileged administrator to execute arbitrary commands as a privileged user on the underlying operating system, achieving high confidentiality, integrity, and availability impact (CVSS 7.2). Exploitation requires valid privileged credentials (PR:H) and network reachability to the management CLI, and no public exploit has been identified; EPSS is 1.23% (68th percentile), indicating a moderate, non-emergency risk. The vendor has published an advisory (HPE docDisplay hpesbnw04957en_us) that should be consulted for fixed versions.
Authenticated command injection in the ArubaOS (AOS-8) Controller and Mobility Conductor CLI lets an attacker who already holds a privileged administrator-level CLI account execute arbitrary commands as a privileged user on the underlying operating system. The weakness is limited by its PR:H prerequisite - a valid high-privilege, network-reachable CLI session is required - so realistic exposure is confined to compromised admin credentials, reused/leaked administrator logins, or malicious insiders rather than unauthenticated outsiders. At time of analysis there is no CISA KEV listing and no public exploit code identified; EPSS sits at 1.23% (68th percentile), consistent with a genuine but moderate-priority issue rather than an emergency, and defenders should confirm the exact affected AOS-8 release trains against the HPE advisory because the CPE entries carry unversioned wildcards.
Authenticated attackers with administrative privileges can exploit an unrestricted file upload in the ArubaOS web management interface (AOS-10 Gateway and AOS-8 Controller/Mobility Conductor) to write arbitrary files and execute commands on the underlying operating system. This is a moderate-priority issue with a CVSS score of 7.2; no public exploit code or active exploitation has been identified at time of analysis, and EPSS is low at 0.55%. The management interface is not intended to be internet-exposed, so real-world risk is reduced when it is restricted to trusted network segments.
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple authenticated command injection vulnerabilities exist in the command line interface. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Multiple authenticated command injection vulnerabilities exist in the command line interface. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Multiple authenticated command injection vulnerabilities exist in the command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass security controls which would normally prohibit unsigned. Rated medium severity (CVSS 6.4). No vendor patch available.
ArubaOS access points are vulnerable to gateway impersonation attacks when clients connect via wired or wireless interfaces, allowing unauthenticated attackers to redirect network traffic into a man-in-the-middle position. An attacker can exploit address-based spoofing to intercept or modify data streams intended for the legitimate gateway, compromising the confidentiality of client communications. No patch is currently available.
Arubaos contains a vulnerability that allows attackers to bypass Layer 2 (L2) communication restrictions between clients and redirect traf (CVSS 4.3).
Arubaos contains a vulnerability that allows attackers to redirect intercepted traffic to facilitate machine-in-the-middle (MitM) attacks (CVSS 4.3).
Traffic interception in ArubaOS Wi-Fi networks allows adjacent attackers to bypass BSSID isolation controls and redirect victim traffic by exploiting port associations across multiple wireless networks. Successful attacks could enable eavesdropping, session hijacking, or denial of service without authentication or user interaction. No patch is currently available for this medium-severity vulnerability.
Malicious actors can install unauthorized Group Temporal Keys on ArubaOS wireless clients through a standardized roaming protocol vulnerability, enabling frame injection and network segmentation bypass. An attacker positioned on the local network could leverage this to intercept traffic, bypass client isolation, and compromise network integrity and confidentiality. No patch is currently available.
Improper cryptographic validation in ArubaOS Wi-Fi encryption allows adjacent network attackers to forge authenticated frames by spoofing the primary BSSID and inject tampered data to targeted clients without authentication. This medium-severity flaw (CVSS 5.4) bypasses standard encryption separation between wireless endpoints, enabling data manipulation on affected networks. No patch is currently available.
Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. [CVSS 5.3 MEDIUM]
Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. [CVSS 5.3 MEDIUM]
An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 operating systems. [CVSS 6.5 MEDIUM]
A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. [CVSS 6.5 MEDIUM]
Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. [CVSS 7.2 HIGH]
Arubaos contains a vulnerability that allows attackers to an authenticated malicious actor to create or modify arbitrary files and execute (CVSS 7.2).
An improper input handling vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. [CVSS 7.2 HIGH]
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. [CVSS 7.2 HIGH]
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. [CVSS 7.2 HIGH]
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. [CVSS 7.2 HIGH]
A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exploitation could allow an authenticated malicious actor to execute arbitrary code as a privileged user on the underlying operating system. [CVSS 7.2 HIGH]
Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. [CVSS 8.2 HIGH]
Command injection in the ArubaOS command line interface allows an authenticated remote attacker with low-privileged credentials to execute arbitrary commands on the underlying operating system, yielding full compromise of confidentiality, integrity, and availability on the affected device. The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and requires both network reachability to the management CLI and a valid low-privilege account - an unauthenticated attacker cannot exploit it. At time of analysis, no public exploit identified and EPSS is low at 0.10% (28th percentile), with no CISA KEV listing, so this is a credible operational priority for organizations running Aruba/HPE wireless infrastructure rather than an emergency.
A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacker to cause a denial of service. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Path traversal in the low-level interface library of ArubaOS exposes AOS-10 Gateway and AOS-8 Controller/Mobility Conductor deployments to arbitrary file download from the local filesystem. Exploitation is network-reachable (AV:N) but gated behind a high-privileged authenticated session (PR:H), so a successful attacker must already hold administrative or operator-level access to the affected device; impact is limited to confidentiality (file reads), with no integrity or availability effect. There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and the EPSS score of 0.45% (37th percentile) indicates low predicted exploitation activity.
Arbitrary file download in the AOS-10 Gateway and AOS-8 Controller/Mobility Conductor firmware exposes a path traversal flaw in a low-level interface library that lets an authenticated, high-privileged actor read files from the underlying operating system. Exploitation requires an existing administrative session or equivalent privileged credentials on the management plane (CVSS PR:H), so there is no unauthenticated path; the impact is limited to confidentiality (C:H) with no integrity or availability effect, and no public exploit code has been identified at time of analysis. With an EPSS score of 0.45% (37th percentile) and no CISA KEV listing, this is a moderate-priority hardening item whose real-world risk is governed almost entirely by how tightly management access to these appliances is restricted.
ArubaOS 10.x gateways and ArubaOS 8.x controllers/Mobility Conductors expose an arbitrary file download flaw in the web-based management interface, allowing an already-authenticated, high-privileged (PR:H) administrator to retrieve arbitrary files from the appliance via a specially crafted request. The assessed impact is confidentiality-only (CVSS 4.9, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N), so the practical risk is disclosure of sensitive files to someone who has already obtained administrative management credentials; EPSS is low at 0.38% (30th percentile), there is no CISA KEV listing, and no public exploit code has been identified at time of analysis. This is a moderate, not top-tier, priority.
An arbitrary file download flaw in the CLI binary of ArubaOS lets a privileged, authenticated attacker craft CLI commands that retrieve files they should not be able to read, giving full confidentiality exposure of on-device data. Only deployments running AOS-10 Gateway or AOS-8 Controller/Mobility Conductor code are affected, and the CVSS vector (PR:H, high privileges required) means the attacker must already hold operator/admin-level CLI access, so the realistic exploit population is small. There is no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is low at 0.35% (27th percentile), making this a high-scoring but moderate-likelihood issue whose main value to an adversary is post-compromise credential and configuration harvesting rather than initial access.
Authenticated high-privilege CLI users on Aruba AOS-10 Gateways and AOS-8 Controllers/Mobility Conductors can abuse the CLI binary's file-path handling to download arbitrary files from the underlying operating system, exposing configuration, credential, and key material to an actor who already holds elevated administrative access. The flaw is rated CVSS 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) and classified as CWE-284 improper access control, with impact limited to confidentiality because the attacker must first reach the CLI with HIGH privileges, and no integrity or availability effect is possible. No public exploit code has been identified at time of analysis and EPSS estimates a low 0.35% (27th percentile) probability of exploitation in the next 30 days, so this ranks as a moderate-severity hardening issue rather than an emergency patch.
Arbitrary file download in the CLI binary of HPE Aruba Networking ArubaOS (AOS-10 Gateway and AOS-8 Controller/Mobility Conductor) lets an authenticated, high-privilege CLI user retrieve files outside the intended download scope by crafting a specially constructed command, exposing sensitive local files to the attacker. The flaw is rated CVSS 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) and classified as CWE-284 improper access control; impact is limited to confidentiality, with no integrity or availability effect. EPSS is only 0.35% (27th percentile), there is no CISA KEV listing, and no public exploit identified at time of analysis; the primary barrier to exploitation is the requirement for an already privileged authenticated CLI session.
Authenticated command injection in the command-line interface binary of HPE Aruba Networking AOS-10 Gateways and AOS-8 Controllers/Mobility Conductors lets an attacker who already holds high-privilege CLI credentials and has physical access to the appliance hardware escape the restricted CLI and execute arbitrary commands as a privileged user on the underlying operating system. The flaw carries a CVSS v3.1 score of 6.2 (CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), so although confidentiality, integrity and availability impact is rated High, the vector is gated by two strong preconditions - physical access to the controller hardware (AV:P) and high-privilege authenticated access to the CLI (PR:H) - keeping real-world risk low. No public exploit code has been identified at time of analysis, there is no CISA KEV listing, and EPSS is only 0.66% (50th percentile), consistent with a vulnerability that cannot be reached remotely.
Arbitrary file deletion in the Aruba AOS-8 Controller/Mobility Conductor command-line interface allows an authenticated remote attacker with high (administrative) privileges to remove arbitrary files on the affected system, impacting integrity and availability (CVSS 6.5, C:N/I:H/A:H). Affected deployments are ArubaOS-based controllers and Mobility Conductors; the PR:H vector means exploitation requires valid admin CLI credentials, narrowing risk to insiders or attackers who already compromised an administrative account. EPSS is low at 0.36% (28th percentile) and no public exploit identified at time of analysis.
ArubaOS 8.x controllers and Mobility Conductors permit an authenticated high-privilege CLI user to delete arbitrary files, degrading integrity and availability of the affected system. The issue is an improper access control flaw (CWE-284) with a CVSS 3.1 score of 6.5; the vector requires network reachability and high privileges (PR:H) with no user interaction, so unauthenticated or low-privileged attackers cannot exploit it directly. EPSS is low at 0.36% (28th percentile), no public exploit identified at time of analysis, and no confirmed active exploitation (CISA KEV) is reported.
Authenticated, highly privileged users of the ArubaOS command-line interface on AOS-8 Controllers and Mobility Conductors can delete arbitrary files on the device, degrading integrity and availability (CVSS 3.1 base 6.5, C:N/I:H/A:H). Exploitation requires valid administrative credentials plus network reachability to the management CLI (AV:N/AC:L/PR:H/UI:N), so real-world risk is concentrated in deployments where the management plane is broadly exposed rather than segmented or protected by MFA. No public exploit code and no CISA KEV listing were identified in the supplied intelligence, and EPSS is low at 0.36% (28th percentile), making this a moderate rather than top-tier priority.
Authenticated command injection in the ArubaOS (AOS-8) Controller and Mobility Conductor CLI allows a privileged administrator to execute arbitrary commands as a privileged user on the underlying operating system, achieving high confidentiality, integrity, and availability impact (CVSS 7.2). Exploitation requires valid privileged credentials (PR:H) and network reachability to the management CLI, and no public exploit has been identified; EPSS is 1.23% (68th percentile), indicating a moderate, non-emergency risk. The vendor has published an advisory (HPE docDisplay hpesbnw04957en_us) that should be consulted for fixed versions.
Authenticated command injection in the ArubaOS (AOS-8) Controller and Mobility Conductor CLI lets an attacker who already holds a privileged administrator-level CLI account execute arbitrary commands as a privileged user on the underlying operating system. The weakness is limited by its PR:H prerequisite - a valid high-privilege, network-reachable CLI session is required - so realistic exposure is confined to compromised admin credentials, reused/leaked administrator logins, or malicious insiders rather than unauthenticated outsiders. At time of analysis there is no CISA KEV listing and no public exploit code identified; EPSS sits at 1.23% (68th percentile), consistent with a genuine but moderate-priority issue rather than an emergency, and defenders should confirm the exact affected AOS-8 release trains against the HPE advisory because the CPE entries carry unversioned wildcards.
Authenticated attackers with administrative privileges can exploit an unrestricted file upload in the ArubaOS web management interface (AOS-10 Gateway and AOS-8 Controller/Mobility Conductor) to write arbitrary files and execute commands on the underlying operating system. This is a moderate-priority issue with a CVSS score of 7.2; no public exploit code or active exploitation has been identified at time of analysis, and EPSS is low at 0.55%. The management interface is not intended to be internet-exposed, so real-world risk is reduced when it is restricted to trusted network segments.
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Multiple authenticated command injection vulnerabilities exist in the command line interface. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Multiple authenticated command injection vulnerabilities exist in the command line interface. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Multiple authenticated command injection vulnerabilities exist in the command line interface. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass security controls which would normally prohibit unsigned. Rated medium severity (CVSS 6.4). No vendor patch available.