Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

51 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-33518ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. SucceMEDIUM 5.30.5 %
CVE-2024-33517ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. SucceHIGH 7.50.6 %
CVE-2024-33516ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. SucHIGH 7.50.6 %
CVE-2024-33515ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploiHIGH 7.50.6 %
CVE-2024-33514ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploiHIGH 7.50.6 %
CVE-2024-33513ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploiMEDIUM 5.90.5 %
CVE-2024-33512ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remCRITICAL 9.815 %
CVE-2024-33511ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code executCRITICAL 9.815 %
CVE-2024-26305ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendinCRITICAL 9.815 %
CVE-2024-26304ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; …There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code executionCRITICAL 9.844 %
CVE-2023-35979- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management InterfaceHIGH 7.50.6 %
CVE-2023-35978- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management InterfaceMEDIUM 6.10.5 %
CVE-2023-35977- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Authenticated Sensitive Information Disclosure in ArubaOS Command Line InterfaceMEDIUM 6.50.5 %
CVE-2023-35976- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Authenticated Sensitive Information Disclosure in ArubaOS Command Line InterfaceMEDIUM 6.50.5 %
CVE-2023-35975- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File DeletionHIGH 8.10.7 %
CVE-2023-35974- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.4 %
CVE-2023-35973- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.4 %
CVE-2023-35972- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Authenticated Remote Command Execution in ArubaOS Web-based Management InterfaceHIGH 7.21.6 %
CVE-2023-35971- ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; …Unauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management InterfaceHIGH 8.80.6 %
CVE-2023-22778ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Stored Cross-Site ScriptingMEDIUM 4.80.5 %
CVE-2023-22777ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Information Disclosure in ArubaOS Web-based Management InterfaceMEDIUM 6.50.6 %
CVE-2023-22776ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File ReadMEDIUM 4.90.7 %
CVE-2023-22775ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Sensitive Information Disclosure in ArubaOS Command Line InterfaceMEDIUM 6.50.6 %
CVE-2023-22774ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.HIGH 7.20.8 %
CVE-2023-22773ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.HIGH 7.20.8 %
CVE-2023-22772ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File DeletionMEDIUM 6.50.7 %
CVE-2023-22771ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Insufficient Session Expiration in ArubaOS Command Line InterfaceMEDIUM 6.80.4 %
CVE-2023-22770ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22769ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22768ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22767ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22766ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22765ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22764ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22763ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22762ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in the ArubaOS Command Line InterfaceHIGH 7.21.5 %
CVE-2023-22761ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in ArubaOS Web-based Management InterfaceHIGH 7.21.6 %
CVE-2023-22760ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in ArubaOS Web-based Management InterfaceHIGH 7.21.6 %
CVE-2023-22759ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in ArubaOS Web-based Management InterfaceHIGH 7.21.6 %
CVE-2023-22758ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Authenticated Remote Command Execution in ArubaOS Web-based Management InterfaceHIGH 7.21.6 %
CVE-2023-22757ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and belowUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesCRITICAL 9.81.1 %
CVE-2023-22756ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and belowUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesCRITICAL 9.81.1 %
CVE-2023-22755ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and belowUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesCRITICAL 9.81.1 %
CVE-2023-22754ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and belowUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesCRITICAL 9.81.1 %
CVE-2023-22753ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and belowUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesCRITICAL 9.81.1 %
CVE-2023-22752ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI ProtocolCRITICAL 9.81.3 %
CVE-2023-22751ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI ProtocolCRITICAL 9.81.3 %
CVE-2023-22750ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Multiple Unauthenticated Command Injections in the PAPI ProtocolCRITICAL 9.81.7 %
CVE-2023-22749ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Multiple Unauthenticated Command Injections in the PAPI ProtocolCRITICAL 9.81.7 %
CVE-2023-22748ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Multiple Unauthenticated Command Injections in the PAPI ProtocolCRITICAL 9.81.7 %
CVE-2023-22747ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; …Multiple Unauthenticated Command Injections in the PAPI ProtocolCRITICAL 9.81.7 %