Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
51 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-33518 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Succe | MEDIUM 5.3 | 0.5 % | ||
| CVE-2024-33517 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Succe | HIGH 7.5 | 0.6 % | ||
| CVE-2024-33516 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Suc | HIGH 7.5 | 0.6 % | ||
| CVE-2024-33515 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploi | HIGH 7.5 | 0.6 % | ||
| CVE-2024-33514 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploi | HIGH 7.5 | 0.6 % | ||
| CVE-2024-33513 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploi | MEDIUM 5.9 | 0.5 % | ||
| CVE-2024-33512 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated rem | CRITICAL 9.8 | 15 % | ||
| CVE-2024-33511 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execut | CRITICAL 9.8 | 15 % | ||
| CVE-2024-26305 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendin | CRITICAL 9.8 | 15 % | ||
| CVE-2024-26304 | ArubaOS 10.5.x.x: 10.5.1.0 and below ; ArubaOS 10.4.x.x: 10.4.1.0 and below ; ArubaOS 8.11.x.x: 8.11.2.1 and below ; … | There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution | CRITICAL 9.8 | 44 % | ||
| CVE-2023-35979 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface | HIGH 7.5 | 0.6 % | ||
| CVE-2023-35978 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-35977 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface | MEDIUM 6.5 | 0.5 % | ||
| CVE-2023-35976 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface | MEDIUM 6.5 | 0.5 % | ||
| CVE-2023-35975 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion | HIGH 8.1 | 0.7 % | ||
| CVE-2023-35974 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.4 % | ||
| CVE-2023-35973 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.4 % | ||
| CVE-2023-35972 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface | HIGH 7.2 | 1.6 % | ||
| CVE-2023-35971 | - ArubaOS 10.4.x.x: 10.4.0.1 and below ; - ArubaOS 8.11.x.x: 8.11.1.0 and below ; - ArubaOS 8.10.x.x: 8.10.0.6 and below ; … | Unauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface | HIGH 8.8 | 0.6 % | ||
| CVE-2023-22778 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Stored Cross-Site Scripting | MEDIUM 4.8 | 0.5 % | ||
| CVE-2023-22777 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Information Disclosure in ArubaOS Web-based Management Interface | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-22776 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read | MEDIUM 4.9 | 0.7 % | ||
| CVE-2023-22775 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-22774 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. | HIGH 7.2 | 0.8 % | ||
| CVE-2023-22773 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. | HIGH 7.2 | 0.8 % | ||
| CVE-2023-22772 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-22771 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Insufficient Session Expiration in ArubaOS Command Line Interface | MEDIUM 6.8 | 0.4 % | ||
| CVE-2023-22770 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22769 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22768 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22767 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22766 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22765 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22764 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22763 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22762 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in the ArubaOS Command Line Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2023-22761 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface | HIGH 7.2 | 1.6 % | ||
| CVE-2023-22760 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface | HIGH 7.2 | 1.6 % | ||
| CVE-2023-22759 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface | HIGH 7.2 | 1.6 % | ||
| CVE-2023-22758 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface | HIGH 7.2 | 1.6 % | ||
| CVE-2023-22757 | ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-22756 | ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-22755 | ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-22754 | ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-22753 | ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-22752 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol | CRITICAL 9.8 | 1.3 % | ||
| CVE-2023-22751 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol | CRITICAL 9.8 | 1.3 % | ||
| CVE-2023-22750 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Multiple Unauthenticated Command Injections in the PAPI Protocol | CRITICAL 9.8 | 1.7 % | ||
| CVE-2023-22749 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Multiple Unauthenticated Command Injections in the PAPI Protocol | CRITICAL 9.8 | 1.7 % | ||
| CVE-2023-22748 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Multiple Unauthenticated Command Injections in the PAPI Protocol | CRITICAL 9.8 | 1.7 % | ||
| CVE-2023-22747 | ArubaOS 8.6.x.x: 8.6.0.19 and below ; ArubaOS 8.10.x.x: 8.10.0.4 and below ; ArubaOS 10.3.x.x: 10.3.1.0 and below ; … | Multiple Unauthenticated Command Injections in the PAPI Protocol | CRITICAL 9.8 | 1.7 % |