Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV
TI-2017-03639 Apache Struts Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Arubaos 233 records HIGH Clearpass Policy Manager 136 records CRITICAL Sd-wan 89 records HIGH Edgeconnect Sd-wan Orchestrator 67 records MEDIUM Fabric Composer 57 records MEDIUM Airwave 36 records MEDIUM Clearpass 36 records MEDIUM Instant 33 records MEDIUM

Records

33 records in Instant · all components

TI-2021-07440 CVE-2021-25162 · GHSA-6wrf-58xj-r33f

OS command injection in Aruba Instant Access Points

Priority MEDIUM 57

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and be…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.25765 Published 2021-03-30 No fix listed CWE-78
TI-2017-09737 CVE-2017-13099 · GHSA-97gp-82pc-qc6x

wolfSSL Bleichenbacher/ROBOT

Priority MEDIUM 55

wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.27383 Published 2017-12-13 Fixed in 3.12.2 CWE-203
TI-2021-07436 CVE-2021-25158 · GHSA-xx6v-23gw-w7gq

Race condition in Aruba Instant Access Points

Priority MEDIUM 50

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.30459 Published 2021-03-30 No fix listed CWE-362
TI-2021-07434 CVE-2021-25156 · GHSA-6896-p39g-5747

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant…

Priority MEDIUM 50

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.3965 Published 2021-03-30 No fix listed
TI-2020-15108 CVE-2020-24636 · GHSA-mq4g-hhgp-p8r7

OS command injection in Aruba Instant Access Points

Priority MEDIUM 48

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03653 Published 2021-03-29 No fix listed CWE-78
TI-2019-03746 CVE-2019-5319 · GHSA-5r54-pmvg-4gqx

Buffer overflow in Aruba Instant Access Points

Priority MEDIUM 47

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02694 Published 2021-03-30 No fix listed CWE-120
TI-2022-17620 CVE-2022-37889 · GHSA-c553-7wj6-jj4q

Buffer overflow in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series…

Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2022-10-07 No fix listed CWE-120
TI-2022-17619 CVE-2022-37888 · GHSA-j45x-9cfm-vhqh

Buffer overflow in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series…

Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02054 Published 2022-10-06 No fix listed CWE-120
TI-2022-17618 CVE-2022-37887 · GHSA-f564-g35c-m53p

Buffer overflow in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series…

Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2022-10-07 No fix listed CWE-120
TI-2022-17617 CVE-2022-37886 · GHSA-6jrx-3m9v-x339

Buffer overflow in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series…

Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01868 Published 2022-10-07 No fix listed CWE-120
TI-2022-17616 CVE-2022-37885 · GHSA-w8jc-jppc-w26v

Buffer overflow in Aruba Access Points; 100 Series; 103 Series; 110 Series; 120 Series…

Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01868 Published 2022-10-07 No fix listed CWE-120
TI-2021-07427 CVE-2021-25149 · GHSA-7845-f47p-2gm3

Buffer overflow in Aruba Instant Access Points

Priority MEDIUM 46

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01828 Published 2021-03-29 No fix listed CWE-120
TI-2021-07439 CVE-2021-25161 · GHSA-g3xx-qmpj-v42m

Cross-site scripting in Aruba Instant Access Points

Priority MEDIUM 44

A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.16372 Published 2021-03-30 No fix listed CWE-79
TI-2021-07428 CVE-2021-25150 · GHSA-ff4v-7j2m-cv66

OS command injection in Aruba Instant Access Points

Priority MEDIUM 44

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03152 Published 2021-03-30 No fix listed CWE-78
TI-2021-07437 CVE-2021-25159 · GHSA-mf7r-w9m2-c53w

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant…

Priority MEDIUM 43

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.12573 Published 2021-03-30 No fix listed
TI-2021-07433 CVE-2021-25155 · GHSA-4gp5-j36j-xx9p

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant…

Priority MEDIUM 43

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.1242 Published 2021-03-30 No fix listed
TI-2021-07422 CVE-2021-25144 · GHSA-9g43-hm8v-4vhj

Buffer overflow in Aruba Instant Access Points

Priority MEDIUM 43

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0238 Published 2021-03-29 No fix listed CWE-120
TI-2021-07424 CVE-2021-25146 · GHSA-cjfc-vrv4-xxpp

OS command injection in Aruba Instant Access Points

Priority LOW 37

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03018 Published 2021-03-30 No fix listed CWE-78
TI-2020-15107 CVE-2020-24635 · GHSA-863p-rw7x-45hf

OS command injection in Aruba Instant Access Points

Priority LOW 37

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03018 Published 2021-03-29 No fix listed CWE-78
Load more
Open these records in search →