Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central vulnerabilities
49 known vulnerabilities in Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central from Hewlett Packard Enterprise. 49 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Formula Elements in a CSV File
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system
- 8.8 High severity
Aruba Mobility Conductor (formerly Mobility…: Write-what-where Condition
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system
- 8.8 High severity
Aruba Mobility Conductor (formerly Mobility…: Out-of-bounds Write
A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- 9.8 Critical severity
Aruba Mobility Conductor (formerly Mobility…: Improper Neutralization of Special Elements used in an OS Command
There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of this vulnerability