Arubaos vulnerabilities
151 known vulnerabilities in Arubaos from Aruba Networks. 151 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities re
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities re
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities re
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities re
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities re
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Out-of-bounds Write
There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Out-of-bounds Write
There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in a Command
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation o
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in a Command
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation o
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in a Command
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation o
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in a Command
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation o
- 8.8 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.5 High severity
Aruba Mobility Conductor (formerly Mobility…: Uncontrolled Resource Consumption
A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system. A successful attacker can cause a system hang which can only be resolved via a power cycle of the impacte
- 8.1 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Limitation of a Pathname to a Restricted Directory
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system.
- 8.8 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Formula Elements in a CSV File
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system
- 8.8 High severity
Aruba Mobility Conductor (formerly Mobility…: Write-what-where Condition
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system
- 8.8 High severity
Aruba Mobility Conductor (formerly Mobility…: Out-of-bounds Write
A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of this vulnerability
- 7.8 High severity
Aruba Access Points: 100 Series; 103 Series…: Improper Neutralization of Special Elements used in an OS Command
An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying oper
- 9.8 Critical severity
Aruba Access Points: 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.
- 9.8 Critical severity
Aruba Access Points: 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.
- 9.8 Critical severity
Aruba Access Points: 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exp
- 9.8 Critical severity
Aruba Access Points: 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exp
- 9.8 Critical severity
Aruba Access Points: 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exp
- 9.8 Critical severity
Aruba Access Points; 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exp
- 9.8 Critical severity
Aruba Access Points: 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exp