Skip to contentArubanetworks vulnerabilities
Newest
- arubanetworks arubaos, instant, hewlett packard enterprise hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423995.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423985.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423939.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10, hp instantos +1 more +3 moreUnauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the Soft AP Daemon Service Accessed by the PAPI ProtocolCVE-2024-423949.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the AP Certificate Management Service Accessed by the PAPI ProtocolCVE-2024-423959.8 Critical
- arubanetworks instant, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10, hp instantos +2 moreUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the AP Certificate Management Service Accessed by the PAPI ProtocolCVE-2024-423965.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) clearpass policy manager (cppm) +1 moreAuthenticated Sensitive Information Disclosure in ClearPass Policy ManagerCVE-2024-419166.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) clearpass policy manager (cppm) +1 moreAuthenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management InterfaceCVE-2024-419157.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) clearpass policy manager (cppm) +1 moreAuthenticated Sensitive Information Disclosure in ClearPass Policy ManagerCVE-2024-54865.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line InterfaceCVE-2024-411366.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line InterfaceCVE-2024-411357.2 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line InterfaceCVE-2024-411347.2 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line InterfaceCVE-2024-411337.2 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan, arubanetworks edgeconnect sd-wan orchestrator +1 moreAuthenticated Server-Side prototype pollution Leading to Information DisclosureCVE-2024-335197.2 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise hpe aruba networking edgeconnect sd-wan orchestrator +1 moreA vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator...CVE-2024-224446.1 Medium
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise hpe aruba networking edgeconnect sd-wan orchestrator +1 moreA vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could...CVE-2024-224437.2 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise hpe aruba networking edgeconnect sd-wan orchestrator +1 moreA vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could...CVE-2024-419148.1 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreAn authenticated sensitive information disclosure vulnerability exists in the CLI service...CVE-2024-314834.9 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service...CVE-2024-314825.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the...CVE-2024-314815.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the...CVE-2024-314805.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications...CVE-2024-314795.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon...CVE-2024-314785.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....CVE-2024-314777.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....CVE-2024-314767.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is an arbitrary file deletion vulnerability in the Central Communications service accessed...CVE-2024-314758.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's...CVE-2024-314748.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a command injection vulnerability in the underlying deauthentication service that could...CVE-2024-314739.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are command injection vulnerabilities in the underlying Soft AP Daemon service that could...CVE-2024-314729.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a command injection vulnerability in the underlying Central Communications service that...CVE-2024-314719.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of...CVE-2024-314709.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are buffer overflow vulnerabilities in the underlying Central Communications service that...CVE-2024-314699.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are buffer overflow vulnerabilities in the underlying Central Communications service that...CVE-2024-314689.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolCVE-2024-314679.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolCVE-2024-314669.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager...CVE-2024-335185.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager...CVE-2024-335175.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreAn unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via...CVE-2024-335165.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service...CVE-2024-335155.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service...CVE-2024-335145.3 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreUnauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service...CVE-2024-335135.9 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying Local User Authentication Database...CVE-2024-33512EPSS 14.6%9.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying Automatic Reporting service that could...CVE-2024-33511EPSS 14.6%9.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying Utility daemon that could lead to...CVE-2024-26305EPSS 15.2%9.8 Critical
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 moreThere is a buffer overflow vulnerability in the underlying L2/L3 Management service that could...CVE-2024-26304Public exploitEPSS 44.3%9.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +1 moreAruba has identified certain configurations of ArubaOS that can lead to partial disclosure of...CVE-2024-256163.7 Low
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed...CVE-2024-256155.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +1 moreThere is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful...CVE-2024-256145.5 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....CVE-2024-256137.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....CVE-2024-256127.2 High
- Show moreLoading…