Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

89 records in Sd-wan · all components

Priority HIGH 65

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15163 Published 2024-05-01 No fix listed CWE-121
Priority MEDIUM 53

There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.019 Published 2022-11-03 Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 52

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0174 Published 2023-02-28 No fix listed CWE-77
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 51

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 51

There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) U…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01304 Published 2023-02-28 No fix listed CWE-787
Priority MEDIUM 51

There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) U…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01304 Published 2023-02-28 No fix listed CWE-787
TI-2020-15105 CVE-2020-24633 · GHSA-8vgr-w2rm-8hjx

Buffer overflow in Aruba 9000 Gateway

Priority MEDIUM 50

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (821…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05111 Published 2020-12-11 No fix listed CWE-120
Priority MEDIUM 47

A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02409 Published 2021-09-07 Fixed in 8.6.0.4-2.2.0.4 CWE-120
TI-2020-15106 CVE-2020-24634 · GHSA-5v7p-whcg-3j32

Command injection in Aruba 9000 Gateway

Priority MEDIUM 46

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor controllers in Aruba 9000 Ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02076 Published 2020-12-11 No fix listed CWE-77
Priority MEDIUM 45

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-02-28 No fix listed CWE-120
Priority MEDIUM 43

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01668 Published 2022-11-03 Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 42

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00957 Published 2022-11-03 Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-1236
Priority MEDIUM 42

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00885 Published 2022-11-03 Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-123
Load more
Open these records in search →