Skip to contentArubanetworks Arubaos vulnerabilities
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking 100 series cellular bridge +1 moreAuthenticated Command Injection Vulnerability Leading to Arbitrary Remote Command ExecutionCVE-2025-371626.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking 100 series cellular bridge +1 moreUnauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management InterfaceCVE-2025-371617.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371454.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371444.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Physical Access Required)CVE-2025-371434.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371424.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371414.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371404.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required)CVE-2025-371386.2 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371376.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371366.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371356.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371347.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activ…CVE-2025-371337.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File WriteCVE-2025-371327.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreReflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management InterfaceCVE-2025-270845.4 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreArbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility ConductorCVE-2025-270854.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreAuthenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-270837.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreAuthenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File WriteCVE-2025-270827.2 High
- arubanetworks instant, arubaos, hewlett packard enterprise (hpe) hpe aruba networking access points, instant aos-8, and aos-10 +2 moreArbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)CVE-2024-474637.2 High
- arubanetworks instant, arubaos, hewlett packard enterprise (hpe) hpe aruba networking access points, instant aos-8, and aos-10 +2 moreArbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)CVE-2024-474627.2 High
- arubanetworks instant, arubaos, hewlett packard enterprise (hpe) hpe aruba networking access points, instant aos-8, and aos-10 +2 moreAuthenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10CVE-2024-474617.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) hpe aruba networking access points, instant aos-8, and aos-10 +2 moreUnauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI ProtocolCVE-2024-474609.0 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) hpe aruba networking access points, instant aos-8, and aos-10 +2 moreUnauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI ProtocolCVE-2024-425099.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreUnauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI ProtocolCVE-2024-425079.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreUnauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI ProtocolCVE-2024-425069.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreUnauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI ProtocolCVE-2024-425059.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreAuthenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)CVE-2024-425037.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreAuthenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line InterfaceCVE-2024-425027.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) aruba os +1 moreAuthenticated Path Traversal Vulnerability Leads to a Remote Command Execution (RCE)CVE-2024-425017.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-424005.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423995.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423985.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423939.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10, hp instantos +1 more +3 moreUnauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423949.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the AP Certificate Management Service Accessed by the PAPI ProtocolCVE-2024-423959.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreAn authenticated sensitive information disclosure vulnerability exists in the CLI service...CVE-2024-314834.9 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service...CVE-2024-314825.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the...CVE-2024-314815.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the...CVE-2024-314805.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications...CVE-2024-314795.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon...CVE-2024-314785.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....CVE-2024-314777.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....CVE-2024-314767.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is an arbitrary file deletion vulnerability in the Central Communications service accessed...CVE-2024-314758.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's...CVE-2024-314748.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a command injection vulnerability in the underlying deauthentication service that could...CVE-2024-314739.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are command injection vulnerabilities in the underlying Soft AP Daemon service that could...CVE-2024-314729.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a command injection vulnerability in the underlying Central Communications service that...CVE-2024-314719.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of...CVE-2024-314709.8 Critical
- Show moreLoading…