Skip to contentArubanetworks Arubaos vulnerabilities
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are buffer overflow vulnerabilities in the underlying Central Communications service that...CVE-2024-314699.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are buffer overflow vulnerabilities in the underlying Central Communications service that...CVE-2024-314689.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolCVE-2024-314679.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolCVE-2024-314669.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager...CVE-2024-335185.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager...CVE-2024-335175.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via...CVE-2024-335165.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service...CVE-2024-335155.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service...CVE-2024-335145.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service...CVE-2024-335135.9 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying Local User Authentication Database...CVE-2024-33512EPSS 14.6%9.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying Automatic Reporting service that could...CVE-2024-33511EPSS 14.6%9.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying Utility daemon that could lead to...CVE-2024-26305EPSS 15.2%9.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying L2/L3 Management service that could...CVE-2024-26304Public exploitEPSS 44.3%9.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +1 moreAruba has identified certain configurations of ArubaOS that can lead to partial disclosure of...CVE-2024-256163.7 Low
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed...CVE-2024-256155.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +1 moreThere is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful...CVE-2024-256145.5 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....CVE-2024-256137.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....CVE-2024-256127.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....CVE-2024-256117.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....CVE-2024-13567.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreAn authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful...CVE-2023-456274.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreAn authenticated vulnerability has been identified allowing an attacker to effectively establish...CVE-2023-456265.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....CVE-2023-456257.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed...CVE-2023-456247.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service...CVE-2023-456237.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed...CVE-2023-456227.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the...CVE-2023-456217.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the...CVE-2023-456207.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's...CVE-2023-456198.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI ...CVE-2023-456188.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's...CVE-2023-456178.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere is a buffer overflow vulnerability in the underlying AirWave client service that could lead...CVE-2023-456169.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are buffer overflow vulnerabilities in the underlying CLI service that could lead to...CVE-2023-456159.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points: 100 series; 103 series; 110 series; 120 series; 130 series; 200 series; 207 series; 210 series; 220 series; 260 series; 300 series; 303 series; 310 series; 318 series hardened access points; 320 series; 330 series; 340 series; 370 series; 500 series; 510 series; 530 series; 550 series; 630 series; 650 series;, hp instantos +2 moreThere are buffer overflow vulnerabilities in the underlying CLI service that could lead to...CVE-2023-456149.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) 9200 series mobility controllers and sd-wan gateways, 9000 series mobility controllers and sd-wan gateways +1 moreHardware Root of Trust Bypass in 9200 and 9000 Series Controllers and GatewaysCVE-2023-384867.7 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) 9200 series mobility controllers and sd-wan gateways, 9000 series mobility controllers and sd-wan gateways, hewlett packard enterprise 9200 series mobility controllers and sd-wan gateways 9000 series mobility controllers and sd-wan +2 moreMultiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and GatewaysCVE-2023-384858.0 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) 9200 series mobility controllers and sd-wan gateways, 9000 series mobility controllers and sd-wan gateways, hewlett packard enterprise 9200 series mobility controllers and sd-wan gateways 9000 series mobility controllers and sd-wan +2 moreMultiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and GatewaysCVE-2023-384848.0 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp instantos +1 more +3 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolCVE-2023-359829.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp instantos +1 more +3 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolCVE-2023-359819.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp instantos +1 more +3 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolCVE-2023-359809.8 Critical
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreUnauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management InterfaceCVE-2023-359795.3 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreReflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management InterfaceCVE-2023-359786.1 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Sensitive Information Disclosure in ArubaOS Command Line InterfaceCVE-2023-359776.5 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Sensitive Information Disclosure in ArubaOS Command Line InterfaceCVE-2023-359766.5 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File DeletionCVE-2023-359756.5 Medium
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceCVE-2023-359747.2 High
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceCVE-2023-359737.2 High
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreAuthenticated Remote Command Execution in ArubaOS Web-based Management InterfaceCVE-2023-359727.2 High
- arubanetworks arubaos, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +1 moreUnauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management InterfaceCVE-2023-359718.8 High
- Show moreLoading…