Arubaos Aos
Monthly
Authenticated command injection in the command line interface of HPE Aruba Access Points running AOS-10 (10.7.x and above) lets a high-privileged remote operator break out of the CLI and run arbitrary operating-system commands on the underlying AP. HPE self-reported the flaw (CWE-77) with a CVSS 7.2 rating and total technical impact per CISA SSVC, though there is no public exploit identified at time of analysis and EPSS estimates only a 0.19% (40th percentile) exploitation probability. Notably, AOS-10.4 APs and the AOS-8 Instant branch are explicitly not affected, narrowing the exposed fleet.
Authenticated OS command injection in HPE Aruba Networking Access Points running ArubaOS (AOS-10) allows a high-privilege remote attacker to execute arbitrary system commands on the underlying operating system via flawed configuration-processing logic (CWE-78). Affected releases include AOS-10.4.x, 10.7.x, and 10.8.0.0; AOS-8 Instant software is explicitly not affected. There is no public exploit identified at time of analysis, and SSVC reflects no known exploitation with a low EPSS of 0.12%, though technical impact is rated total.
Authenticated command injection in the ArubaOS (AOS) command line interface allows a high-privileged remote operator on Aruba Access Points running AOS-10 and AOS-8 Instant to break out of the restricted CLI shell and run arbitrary commands on the underlying operating system. HPE, the reporting vendor, classifies the technical impact as total (full confidentiality, integrity, and availability loss). There is no public exploit identified at time of analysis and EPSS probability is low (0.12%), consistent with the CISA SSVC assessment of no known exploitation.
Cross-site scripting in the web-based management interface of Aruba Access Points running AOS-10 and AOS-8 Instant allows an unauthenticated attacker on the adjacent local network to inject arbitrary JavaScript that executes in an authenticated administrator's browser. Successful exploitation can lead to theft of session/user data and manipulation of device configuration by riding the victim admin's privileges. No public exploit has been identified at time of analysis, and EPSS is low (0.12%), consistent with the SSVC assessment of no observed exploitation.
XML entity expansion (CWE-776) in the DHCP XML handling component of HPE Aruba AOS Instant 8.x.x.x enables an unauthenticated remote attacker to cause denial-of-service via excessive resource consumption on affected Access Points. Exploitation requires both high attack complexity and user interaction (CVSS AV:N/AC:H/PR:N/UI:R), restricting the realistic attack surface to scenarios where a connected wireless client triggers the vulnerable DHCP parsing path. No active exploitation has been identified - EPSS stands at 0.07% (21st percentile), SSVC confirms exploitation status of none, and the vulnerability is absent from CISA KEV.
Authenticated command injection in the command line interface of HPE Aruba Access Points running AOS-10 (10.7.x and above) lets a high-privileged remote operator break out of the CLI and run arbitrary operating-system commands on the underlying AP. HPE self-reported the flaw (CWE-77) with a CVSS 7.2 rating and total technical impact per CISA SSVC, though there is no public exploit identified at time of analysis and EPSS estimates only a 0.19% (40th percentile) exploitation probability. Notably, AOS-10.4 APs and the AOS-8 Instant branch are explicitly not affected, narrowing the exposed fleet.
Authenticated OS command injection in HPE Aruba Networking Access Points running ArubaOS (AOS-10) allows a high-privilege remote attacker to execute arbitrary system commands on the underlying operating system via flawed configuration-processing logic (CWE-78). Affected releases include AOS-10.4.x, 10.7.x, and 10.8.0.0; AOS-8 Instant software is explicitly not affected. There is no public exploit identified at time of analysis, and SSVC reflects no known exploitation with a low EPSS of 0.12%, though technical impact is rated total.
Authenticated command injection in the ArubaOS (AOS) command line interface allows a high-privileged remote operator on Aruba Access Points running AOS-10 and AOS-8 Instant to break out of the restricted CLI shell and run arbitrary commands on the underlying operating system. HPE, the reporting vendor, classifies the technical impact as total (full confidentiality, integrity, and availability loss). There is no public exploit identified at time of analysis and EPSS probability is low (0.12%), consistent with the CISA SSVC assessment of no known exploitation.
Cross-site scripting in the web-based management interface of Aruba Access Points running AOS-10 and AOS-8 Instant allows an unauthenticated attacker on the adjacent local network to inject arbitrary JavaScript that executes in an authenticated administrator's browser. Successful exploitation can lead to theft of session/user data and manipulation of device configuration by riding the victim admin's privileges. No public exploit has been identified at time of analysis, and EPSS is low (0.12%), consistent with the SSVC assessment of no observed exploitation.
XML entity expansion (CWE-776) in the DHCP XML handling component of HPE Aruba AOS Instant 8.x.x.x enables an unauthenticated remote attacker to cause denial-of-service via excessive resource consumption on affected Access Points. Exploitation requires both high attack complexity and user interaction (CVSS AV:N/AC:H/PR:N/UI:R), restricting the realistic attack surface to scenarios where a connected wireless client triggers the vulnerable DHCP parsing path. No active exploitation has been identified - EPSS stands at 0.07% (21st percentile), SSVC confirms exploitation status of none, and the vulnerability is absent from CISA KEV.