Arubaos vulnerabilities
151 known vulnerabilities in Arubaos from Aruba Networks. 151 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
ArubaOS (AOS): Files or Directories Accessible to External Parties
Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files
- 8.8 High severity
HPE Aruba Networking 100 Series Cellular Bridge: Improper Neutralization of Special Elements used in a Command
A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating syst
- 7.5 High severity
HPE Aruba Networking 100 Series Cellular Bridge: Uncontrolled Resource Consumption
A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacker to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without ma
- 7.2 High severity
ArubaOS (AOS): Improper Neutralization of Special Elements used in a Command
An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the
- 7.2 High severity
ArubaOS (AOS): Improper Neutralization of Special Elements used in a Command
An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the
- 7.2 High severity
ArubaOS (AOS): Unrestricted Upload of File with Dangerous Type
An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files a
- 7.2 High severity
HPE Aruba Networking AOS: Improper Neutralization of Special Elements used in a Command
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a
- 7.2 High severity
HPE Aruba Networking AOS: Unrestricted Upload of File with Dangerous Type
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated attacker to upload arbitrary files and execut
- 7.2 High severity
HPE Aruba Networking Access Points, Instant…: Improper Neutralization of Special Elements used in a Command
An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operatin
- 9.0 Critical severity
HPE Aruba Networking Access Points, Instant…: Improper Neutralization of Special Elements used in a Command
Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of t
- 9.8 Critical severity
HPE Aruba Networking Access Points, Instant…: Improper Neutralization of Special Elements used in a Command
Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of t
- 9.8 Critical severity
Aruba OS: Improper Neutralization of Special Elements used in a Command
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of
- 9.8 Critical severity
Aruba OS: Improper Neutralization of Special Elements used in a Command
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of
- 9.8 Critical severity
Aruba OS: Improper Neutralization of Special Elements used in a Command
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of
- 7.2 High severity
Aruba OS: Improper Neutralization of Special Elements used in an OS Command
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.
- 7.2 High severity
Aruba OS: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.
- 7.2 High severity
Aruba OS: Improper Limitation of a Pathname to a Restricted Directory
An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or inst
- 9.8 Critical severity
HPE Aruba Networking InstantOS and Aruba…: Out-of-bounds Write
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leadin
- 9.8 Critical severity
Hpe Aruba Networking InstantOS and Aruba…: Out-of-bounds Write
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to compl
- 7.5 High severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.
- 7.5 High severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
- 7.5 High severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
- 7.5 High severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service
- 7.5 High severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.
- 8.8 High severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 8.8 High severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 8.2 High severity
AOS-8 Instant and AOS-10 AP: Deletion of Data Structure Sentinel
There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlyin
- 8.2 High severity
AOS-8 Instant and AOS-10 AP: Deletion of Data Structure Sentinel
There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system,
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Improper Neutralization of Special Elements used in an OS Command
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Stack-based Buffer Overflow
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management p
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Stack-based Buffer Overflow
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Stack-based Buffer Overflow
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Stack-based Buffer Overflow
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful ex
- 9.8 Critical severity
AOS-8 Instant and AOS-10 AP: Stack-based Buffer Overflow
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful ex
- 7.5 High severity
Aruba Mobility Conductor (formerly Mobility…: Stack-based Buffer Overflow
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected servic
- 7.5 High severity
Aruba Mobility Conductor (formerly Mobility…: Stack-based Buffer Overflow
An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller.
- 7.5 High severity
Aruba Mobility Conductor (formerly Mobility…: Stack-based Buffer Overflow
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.
- 7.5 High severity
Aruba Mobility Conductor (formerly Mobility…: Stack-based Buffer Overflow
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.