Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

684 records

Priority CRITICAL 100KEV

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to ex…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2017-03-11 Fixed in 2.3.32, 2.5.10.1 CWE-755
Priority HIGH 78

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.64596 Published 2020-06-03 No fix listed CWE-306
Priority HIGH 65

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15163 Published 2024-05-01 No fix listed CWE-121
Priority MEDIUM 62

A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22972 Published 2022-05-10 No fix listed CWE-787
Priority MEDIUM 57

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and be…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.25765 Published 2021-03-30 No fix listed CWE-78
TI-2017-09737 CVE-2017-13099 · GHSA-97gp-82pc-qc6x

wolfSSL Bleichenbacher/ROBOT

Priority MEDIUM 55

wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.27383 Published 2017-12-13 Fixed in 3.12.2 CWE-203
Priority MEDIUM 54

A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.20526 Published 2022-05-10 No fix listed CWE-787
Priority MEDIUM 53

There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.019 Published 2022-11-03 Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 52

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01651 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poin…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acce…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01833 Published 2022-10-28 No fix listed CWE-78
Load more
Open these records in search →