Aruba OS vulnerabilities

6 known vulnerabilities in Aruba OS from Hewlett Packard Enterprise. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Aruba OS: Improper Neutralization of Special Elements used in a Command

  CVE-2024-42507Sep 25, 2024Hewlett Packard EnterpriseEPSS 1.42%

  Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of

• 9.8 Critical severity

  Aruba OS: Improper Neutralization of Special Elements used in a Command

  CVE-2024-42506Sep 25, 2024Hewlett Packard EnterpriseEPSS 1.42%

  Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of

• 9.8 Critical severity

  Aruba OS: Improper Neutralization of Special Elements used in a Command

  CVE-2024-42505Sep 25, 2024Hewlett Packard EnterpriseEPSS 1.49%

  Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of

• 7.2 High severity

  Aruba OS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-42503Sep 17, 2024Hewlett Packard EnterpriseEPSS 1.5%

  Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.

• 7.2 High severity

  Aruba OS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-42502Sep 17, 2024Hewlett Packard EnterpriseEPSS 1.79%

  Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.

• 7.2 High severity

  Aruba OS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-42501Sep 17, 2024Hewlett Packard EnterpriseEPSS 1.17%

  An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or inst