Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

233 records in Arubaos · all components

Priority HIGH 65

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15163 Published 2024-05-01 No fix listed CWE-121
Priority MEDIUM 53

There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.019 Published 2022-11-03 Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 52

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01651 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poin…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acce…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 51

There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01188 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acces…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acces…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Load more
Open these records in search →