Hpe Aruba Networking Wireless Operating System Aos
Monthly
Command injection in the PAPI-accessed CLI service of HPE Aruba Networking Wireless OS (AOS-8 and AOS-10) allows an authenticated remote attacker to break out of the CLI and run arbitrary OS commands on the underlying controller or gateway. The flaw carries CVSS 7.2 (High) and full confidentiality/integrity/availability impact, but requires high privileges (PR:H). No public exploit identified at time of analysis, EPSS is low (0.07%), and CISA SSVC records no observed exploitation.
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an authenticated, high-privileged remote attacker to write arbitrary files onto the underlying device filesystem, enabling potential full compromise of affected wireless controllers and access points. The flaw (CWE-77) carries a CVSS 7.2 rating with total technical impact per CISA SSVC, but no public exploit has been identified at time of analysis and EPSS probability is low at 0.25%. Exploitation currently requires administrative-level credentials, which meaningfully constrains real-world risk despite the network attack vector.
Authenticated command injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets a high-privileged remote attacker break out of the CLI service reached over the PAPI protocol and run arbitrary OS commands on the underlying controller or gateway. The flaw carries CVSS 7.2 (high) with total technical impact, but there is no public exploit identified at time of analysis and CISA's SSVC rates exploitation as none and non-automatable. EPSS is low at 0.19% (41st percentile), consistent with the high-privilege prerequisite limiting opportunistic mass exploitation.
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated remote attacker with high privileges (PR:H) execute arbitrary OS commands on the underlying controller/gateway, yielding full compromise of the wireless infrastructure device. Affected trains include AOS 8.10.x/8.12.x/8.13.x and 10.4.x/10.7.x/10.8.0. There is no public exploit identified at time of analysis, and SSVC lists exploitation as none; EPSS is low at 0.18% (39th percentile).
Authenticated command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 wireless operating systems (CVE-2026-44868, CWE-77) lets a high-privileged remote attacker execute arbitrary OS commands on the underlying controller/gateway. HPE self-reported the flaw; there is no public exploit identified at time of analysis and it is not in CISA KEV, and the low EPSS (0.18%, 39th percentile) reflects no observed exploitation. The primary risk is a privileged operator or a hijacked admin session escaping the constrained management CLI/UI to full root-level control of the network infrastructure device.
Authenticated command injection in HPE Aruba Networking's AOS-8 and AOS-10 wireless operating systems lets a high-privileged remote user run arbitrary operating-system commands through the web-based management interface (CWE-77). Affected devices include Aruba mobility controllers and gateways running vulnerable AOS-8 and AOS-10 builds; the CVSS 3.1 base score is 7.2 (PR:H). There is no public exploit identified at time of analysis, EPSS is low (0.18%, 39th percentile), and CISA SSVC records no known exploitation, so this is a hardening priority rather than an active threat.
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets a high-privilege remote administrator break out of the intended CLI/GUI context and run arbitrary OS commands on the underlying controller/gateway. Multiple 8.x and 10.x branches are affected, giving full confidentiality, integrity, and availability impact (total technical impact per SSVC). There is no public exploit identified at time of analysis, EPSS is low (0.18%), and the flaw is not listed in CISA KEV, so it currently represents a patch-on-schedule rather than emergency issue.
Authenticated command injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote attacker who already holds high-privilege access to the web-based management interface to execute arbitrary operating-system commands on the controller/gateway. The flaw affects multiple AOS-8 (8.10.x-8.13.x) and AOS-10 (10.4.x-10.8.x) branches per HPE advisory hpesbnw05048en_us and carries CVSS 7.2 (High). There is no public exploit identified at time of analysis, EPSS is low (0.18%, 39th percentile), and CISA SSVC records exploitation status as none.
SQL injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated administrator inject crafted input into backend database queries reachable through the CLI and management protocol, ultimately achieving arbitrary command execution on the underlying OS of the wireless controller/gateway. Multiple 8.10.x, 8.12.x, 8.13.x, 10.4.x, 10.7.x and 10.8.0.0 releases are affected. There is no public exploit identified at time of analysis, and EPSS is very low (0.03%), consistent with the SSVC 'Exploitation: none' finding.
Arbitrary OS command execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) is achievable when an administratively-privileged operator injects crafted input into CLI and management-protocol parameters that reach backend database queries unsanitized. Multiple underlying service components are affected across the WLAN controller/gateway software family, and successful exploitation escalates from SQL injection to full command execution on the host OS. There is no public exploit identified at time of analysis, EPSS is negligible (0.03%, 8th percentile), and CISA SSVC rates exploitation as none but technical impact as total.
SQL injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated administrator inject crafted input into unsanitized parameters within several backend service components reached via the CLI and management protocol, ultimately achieving arbitrary command execution on the underlying OS. It affects a broad range of AOS 8.10 through 8.13 and 10.4 through 10.8 releases and carries a CVSS 7.2 (High) rating. There is no public exploit identified at time of analysis, and EPSS is very low at 0.03%.
Command execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an authenticated administrator to inject SQL into several backend service components reachable via the CLI and management protocol, ultimately running arbitrary OS-level commands. The flaw affects multiple 8.x and 10.x AOS branches and carries CVSS 7.2; there is no public exploit identified at time of analysis, and the EPSS score is very low (0.03%, 8th percentile). CISA's SSVC framework rates exploitation as none but technical impact as total, reflecting high potential damage if the high-privilege prerequisite is met.
SQL injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated administrator escalate to arbitrary OS command execution on the underlying controller/gateway by injecting crafted input through the CLI and management protocol into unsanitized backend database queries. Because exploitation demands existing administrative access (PR:H), it functions primarily as a privilege-boundary and integrity-escape issue rather than an initial-access vector, but the CVSS:3.1 base of 7.2 reflects total confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis, EPSS is very low (0.03%, 8th percentile), and CISA SSVC records exploitation as none.
Arbitrary code execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an authenticated administrator to run code with elevated privileges on the underlying OS by sending crafted requests to management service components reached via the command-line interface. Multiple stack-based buffer overflows (CWE-121) underlie the issue, affecting AOS 8.10.x, 8.12.x, 8.13.x, 10.4.x, 10.7.x and 10.8.0.0. No public exploit identified at time of analysis, and EPSS is very low (0.07%, 22nd percentile), consistent with CISA SSVC scoring exploitation as 'none'.
Privilege-to-OS remote code execution affects HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10), where several CLI-accessible management service components contain stack-based buffer overflows (CWE-121). An authenticated administrator can send specially crafted requests to these services to execute arbitrary code with elevated privileges on the underlying OS, escaping the constrained management context. There is no public exploit identified at time of analysis, EPSS is very low (0.07%, 22nd percentile), and it is not listed in CISA KEV.
Privilege escalation to arbitrary code execution affects HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) management service components reachable via the command-line interface. An administrator-authenticated attacker can send crafted requests to trigger stack-based buffer overflows and run arbitrary code with elevated privileges on the underlying OS of the wireless controller or gateway. There is no public exploit identified at time of analysis, EPSS risk is very low (0.07%), and CISA SSVC lists exploitation status as none.
Authenticated command execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an administrator to escalate from the CLI to the underlying OS by triggering stack-based buffer overflows in several management service components. An attacker who already holds administrative CLI credentials can send crafted requests to these services and run arbitrary code with elevated (root-level) privileges on the controller or gateway. There is no public exploit identified at time of analysis, and EPSS is low (0.07%), consistent with the CISA SSVC assessment of no known exploitation.
Authenticated arbitrary code execution in HPE Aruba Networking AOS-8 and AOS-10 wireless operating systems lets an attacker with administrative CLI privileges run code with elevated OS-level privileges via stack-based buffer overflows in several backend management service components. An administrator sending specially crafted requests through the command-line interface can escape the managed CLI context and gain control of the underlying operating system of the controller or gateway. There is no public exploit identified at time of analysis, EPSS probability is very low (0.07%), and CISA SSVC records no known exploitation.
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote attacker holding high privileges to upload arbitrary files to the underlying OS, potentially escalating to remote code execution as a privileged user. Multiple 8.x and 10.x branches are affected across mobility controllers/gateways running these AOS versions. There is no public exploit identified at time of analysis, EPSS is low (0.26%), and SSVC lists exploitation status as none, indicating no observed exploitation to date.
Command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 wireless operating systems lets an authenticated, high-privileged remote attacker upload arbitrary files to the underlying OS, escalating to remote code execution as a privileged user. It affects multiple 8.x and 10.x controller/gateway branches and is fixed via the HPE security bulletin (hpesbnw05048en_us). There is no public exploit identified at time of analysis, and EPSS probability is low (0.26%), consistent with the CISA SSVC assessment of no known exploitation.
Arbitrary file overwrite leading to remote code execution affects HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) via the web-based management interface. An authenticated attacker with high privileges can abuse improper input validation in the certificate download function's file path parameter to overwrite arbitrary files and ultimately execute commands as a privileged OS user. There is no public exploit identified at time of analysis, EPSS is low (0.10%, 27th percentile), and CISA SSVC records no known exploitation.
Remote code execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an unauthenticated remote attacker to overflow a heap buffer in a network management service and run arbitrary code as a privileged OS user, or trigger a denial-of-service crash of the affected process. It affects Aruba mobility controllers and gateways across multiple 8.x and 10.x branches. No public exploit identified at time of analysis and it is not in CISA KEV; EPSS is low (0.12%, 30th percentile), and notably the vendor CVSS vector scores only availability impact despite the RCE claim.
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8) lets an unauthenticated remote attacker crash a network management service by sending specially crafted packets, terminating the service process and disrupting normal controller operations. Affected releases include AOS 8.10.x, 8.12.x, and 8.13.x up to the fixed builds. There is no public exploit identified at time of analysis, and EPSS is low (0.08%), consistent with SSVC exploitation status of 'none' - this is a patch-worthy availability issue rather than an active threat.
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated attacker to crash a critical system process by sending specially crafted network messages to a protocol-handling service (CWE-20, insufficient input validation). Reported by HPE with no public exploit identified at time of analysis; EPSS is very low (0.03%, 9th percentile) and CISA SSVC records exploitation status as none, though the flaw is rated automatable. Impact is limited to availability (CVSS 7.5, A:H) with no confidentiality or integrity loss.
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated attacker to crash a critical system process by sending specially crafted network messages to a protocol-handling service. Because input validation is insufficient, a successful attack terminates the process and disrupts wireless network operations without affecting confidentiality or integrity. There is no public exploit identified at time of analysis, and the EPSS score is very low (0.03%), indicating no observed exploitation activity.
Session persistence in HPE Aruba Networking Wireless Operating System (AOS-8) allows an attacker who has obtained valid user credentials to retain network access even after an administrator has disabled the associated account. The flaw affects AOS versions across the 8.10, 8.12, and 8.13 branches and stems from the platform's failure to invalidate active sessions upon credential revocation. No active exploitation is confirmed (not in CISA KEV), and EPSS is 0.03% at the 10th percentile, placing this squarely in the low-real-world-risk tier despite its medium CVSS score.
Sensitive OS file disclosure in the HPE Aruba Networking AOS-10 Gateway web management interface allows authenticated remote administrators to read arbitrary files on the underlying operating system. Affected version ranges span AOS 10.4.0.0-10.4.1.10, 10.7.0.0-10.7.2.2, and 10.8.0.0. No public exploit code exists and EPSS sits at 0.03% (11th percentile), with SSVC confirming no observed exploitation - risk is primarily from compromised admin credentials or insider threats rather than opportunistic attack.
Command injection in the PAPI-accessed CLI service of HPE Aruba Networking Wireless OS (AOS-8 and AOS-10) allows an authenticated remote attacker to break out of the CLI and run arbitrary OS commands on the underlying controller or gateway. The flaw carries CVSS 7.2 (High) and full confidentiality/integrity/availability impact, but requires high privileges (PR:H). No public exploit identified at time of analysis, EPSS is low (0.07%), and CISA SSVC records no observed exploitation.
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an authenticated, high-privileged remote attacker to write arbitrary files onto the underlying device filesystem, enabling potential full compromise of affected wireless controllers and access points. The flaw (CWE-77) carries a CVSS 7.2 rating with total technical impact per CISA SSVC, but no public exploit has been identified at time of analysis and EPSS probability is low at 0.25%. Exploitation currently requires administrative-level credentials, which meaningfully constrains real-world risk despite the network attack vector.
Authenticated command injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets a high-privileged remote attacker break out of the CLI service reached over the PAPI protocol and run arbitrary OS commands on the underlying controller or gateway. The flaw carries CVSS 7.2 (high) with total technical impact, but there is no public exploit identified at time of analysis and CISA's SSVC rates exploitation as none and non-automatable. EPSS is low at 0.19% (41st percentile), consistent with the high-privilege prerequisite limiting opportunistic mass exploitation.
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated remote attacker with high privileges (PR:H) execute arbitrary OS commands on the underlying controller/gateway, yielding full compromise of the wireless infrastructure device. Affected trains include AOS 8.10.x/8.12.x/8.13.x and 10.4.x/10.7.x/10.8.0. There is no public exploit identified at time of analysis, and SSVC lists exploitation as none; EPSS is low at 0.18% (39th percentile).
Authenticated command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 wireless operating systems (CVE-2026-44868, CWE-77) lets a high-privileged remote attacker execute arbitrary OS commands on the underlying controller/gateway. HPE self-reported the flaw; there is no public exploit identified at time of analysis and it is not in CISA KEV, and the low EPSS (0.18%, 39th percentile) reflects no observed exploitation. The primary risk is a privileged operator or a hijacked admin session escaping the constrained management CLI/UI to full root-level control of the network infrastructure device.
Authenticated command injection in HPE Aruba Networking's AOS-8 and AOS-10 wireless operating systems lets a high-privileged remote user run arbitrary operating-system commands through the web-based management interface (CWE-77). Affected devices include Aruba mobility controllers and gateways running vulnerable AOS-8 and AOS-10 builds; the CVSS 3.1 base score is 7.2 (PR:H). There is no public exploit identified at time of analysis, EPSS is low (0.18%, 39th percentile), and CISA SSVC records no known exploitation, so this is a hardening priority rather than an active threat.
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets a high-privilege remote administrator break out of the intended CLI/GUI context and run arbitrary OS commands on the underlying controller/gateway. Multiple 8.x and 10.x branches are affected, giving full confidentiality, integrity, and availability impact (total technical impact per SSVC). There is no public exploit identified at time of analysis, EPSS is low (0.18%), and the flaw is not listed in CISA KEV, so it currently represents a patch-on-schedule rather than emergency issue.
Authenticated command injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote attacker who already holds high-privilege access to the web-based management interface to execute arbitrary operating-system commands on the controller/gateway. The flaw affects multiple AOS-8 (8.10.x-8.13.x) and AOS-10 (10.4.x-10.8.x) branches per HPE advisory hpesbnw05048en_us and carries CVSS 7.2 (High). There is no public exploit identified at time of analysis, EPSS is low (0.18%, 39th percentile), and CISA SSVC records exploitation status as none.
SQL injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated administrator inject crafted input into backend database queries reachable through the CLI and management protocol, ultimately achieving arbitrary command execution on the underlying OS of the wireless controller/gateway. Multiple 8.10.x, 8.12.x, 8.13.x, 10.4.x, 10.7.x and 10.8.0.0 releases are affected. There is no public exploit identified at time of analysis, and EPSS is very low (0.03%), consistent with the SSVC 'Exploitation: none' finding.
Arbitrary OS command execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) is achievable when an administratively-privileged operator injects crafted input into CLI and management-protocol parameters that reach backend database queries unsanitized. Multiple underlying service components are affected across the WLAN controller/gateway software family, and successful exploitation escalates from SQL injection to full command execution on the host OS. There is no public exploit identified at time of analysis, EPSS is negligible (0.03%, 8th percentile), and CISA SSVC rates exploitation as none but technical impact as total.
SQL injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated administrator inject crafted input into unsanitized parameters within several backend service components reached via the CLI and management protocol, ultimately achieving arbitrary command execution on the underlying OS. It affects a broad range of AOS 8.10 through 8.13 and 10.4 through 10.8 releases and carries a CVSS 7.2 (High) rating. There is no public exploit identified at time of analysis, and EPSS is very low at 0.03%.
Command execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an authenticated administrator to inject SQL into several backend service components reachable via the CLI and management protocol, ultimately running arbitrary OS-level commands. The flaw affects multiple 8.x and 10.x AOS branches and carries CVSS 7.2; there is no public exploit identified at time of analysis, and the EPSS score is very low (0.03%, 8th percentile). CISA's SSVC framework rates exploitation as none but technical impact as total, reflecting high potential damage if the high-privilege prerequisite is met.
SQL injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets an authenticated administrator escalate to arbitrary OS command execution on the underlying controller/gateway by injecting crafted input through the CLI and management protocol into unsanitized backend database queries. Because exploitation demands existing administrative access (PR:H), it functions primarily as a privilege-boundary and integrity-escape issue rather than an initial-access vector, but the CVSS:3.1 base of 7.2 reflects total confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis, EPSS is very low (0.03%, 8th percentile), and CISA SSVC records exploitation as none.
Arbitrary code execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an authenticated administrator to run code with elevated privileges on the underlying OS by sending crafted requests to management service components reached via the command-line interface. Multiple stack-based buffer overflows (CWE-121) underlie the issue, affecting AOS 8.10.x, 8.12.x, 8.13.x, 10.4.x, 10.7.x and 10.8.0.0. No public exploit identified at time of analysis, and EPSS is very low (0.07%, 22nd percentile), consistent with CISA SSVC scoring exploitation as 'none'.
Privilege-to-OS remote code execution affects HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10), where several CLI-accessible management service components contain stack-based buffer overflows (CWE-121). An authenticated administrator can send specially crafted requests to these services to execute arbitrary code with elevated privileges on the underlying OS, escaping the constrained management context. There is no public exploit identified at time of analysis, EPSS is very low (0.07%, 22nd percentile), and it is not listed in CISA KEV.
Privilege escalation to arbitrary code execution affects HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) management service components reachable via the command-line interface. An administrator-authenticated attacker can send crafted requests to trigger stack-based buffer overflows and run arbitrary code with elevated privileges on the underlying OS of the wireless controller or gateway. There is no public exploit identified at time of analysis, EPSS risk is very low (0.07%), and CISA SSVC lists exploitation status as none.
Authenticated command execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an administrator to escalate from the CLI to the underlying OS by triggering stack-based buffer overflows in several management service components. An attacker who already holds administrative CLI credentials can send crafted requests to these services and run arbitrary code with elevated (root-level) privileges on the controller or gateway. There is no public exploit identified at time of analysis, and EPSS is low (0.07%), consistent with the CISA SSVC assessment of no known exploitation.
Authenticated arbitrary code execution in HPE Aruba Networking AOS-8 and AOS-10 wireless operating systems lets an attacker with administrative CLI privileges run code with elevated OS-level privileges via stack-based buffer overflows in several backend management service components. An administrator sending specially crafted requests through the command-line interface can escape the managed CLI context and gain control of the underlying operating system of the controller or gateway. There is no public exploit identified at time of analysis, EPSS probability is very low (0.07%), and CISA SSVC records no known exploitation.
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote attacker holding high privileges to upload arbitrary files to the underlying OS, potentially escalating to remote code execution as a privileged user. Multiple 8.x and 10.x branches are affected across mobility controllers/gateways running these AOS versions. There is no public exploit identified at time of analysis, EPSS is low (0.26%), and SSVC lists exploitation status as none, indicating no observed exploitation to date.
Command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 wireless operating systems lets an authenticated, high-privileged remote attacker upload arbitrary files to the underlying OS, escalating to remote code execution as a privileged user. It affects multiple 8.x and 10.x controller/gateway branches and is fixed via the HPE security bulletin (hpesbnw05048en_us). There is no public exploit identified at time of analysis, and EPSS probability is low (0.26%), consistent with the CISA SSVC assessment of no known exploitation.
Arbitrary file overwrite leading to remote code execution affects HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) via the web-based management interface. An authenticated attacker with high privileges can abuse improper input validation in the certificate download function's file path parameter to overwrite arbitrary files and ultimately execute commands as a privileged OS user. There is no public exploit identified at time of analysis, EPSS is low (0.10%, 27th percentile), and CISA SSVC records no known exploitation.
Remote code execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an unauthenticated remote attacker to overflow a heap buffer in a network management service and run arbitrary code as a privileged OS user, or trigger a denial-of-service crash of the affected process. It affects Aruba mobility controllers and gateways across multiple 8.x and 10.x branches. No public exploit identified at time of analysis and it is not in CISA KEV; EPSS is low (0.12%, 30th percentile), and notably the vendor CVSS vector scores only availability impact despite the RCE claim.
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8) lets an unauthenticated remote attacker crash a network management service by sending specially crafted packets, terminating the service process and disrupting normal controller operations. Affected releases include AOS 8.10.x, 8.12.x, and 8.13.x up to the fixed builds. There is no public exploit identified at time of analysis, and EPSS is low (0.08%), consistent with SSVC exploitation status of 'none' - this is a patch-worthy availability issue rather than an active threat.
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated attacker to crash a critical system process by sending specially crafted network messages to a protocol-handling service (CWE-20, insufficient input validation). Reported by HPE with no public exploit identified at time of analysis; EPSS is very low (0.03%, 9th percentile) and CISA SSVC records exploitation status as none, though the flaw is rated automatable. Impact is limited to availability (CVSS 7.5, A:H) with no confidentiality or integrity loss.
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated attacker to crash a critical system process by sending specially crafted network messages to a protocol-handling service. Because input validation is insufficient, a successful attack terminates the process and disrupts wireless network operations without affecting confidentiality or integrity. There is no public exploit identified at time of analysis, and the EPSS score is very low (0.03%), indicating no observed exploitation activity.
Session persistence in HPE Aruba Networking Wireless Operating System (AOS-8) allows an attacker who has obtained valid user credentials to retain network access even after an administrator has disabled the associated account. The flaw affects AOS versions across the 8.10, 8.12, and 8.13 branches and stems from the platform's failure to invalidate active sessions upon credential revocation. No active exploitation is confirmed (not in CISA KEV), and EPSS is 0.03% at the 10th percentile, placing this squarely in the low-real-world-risk tier despite its medium CVSS score.
Sensitive OS file disclosure in the HPE Aruba Networking AOS-10 Gateway web management interface allows authenticated remote administrators to read arbitrary files on the underlying operating system. Affected version ranges span AOS 10.4.0.0-10.4.1.10, 10.7.0.0-10.7.2.2, and 10.8.0.0. No public exploit code exists and EPSS sits at 0.03% (11th percentile), with SSVC confirming no observed exploitation - risk is primarily from compromised admin credentials or insider threats rather than opportunistic attack.