Priority HIGH 65
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.15163 · Published 2024-05-01 · No fix listed CWE-121
Priority MEDIUM 53
There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.019 · Published 2022-11-03 · Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 51
There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) U…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01304 · Published 2023-02-28 · No fix listed CWE-787
Priority MEDIUM 51
There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) U…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01304 · Published 2023-02-28 · No fix listed CWE-787
Priority MEDIUM 50
There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (821…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05111 · Published 2020-12-11 · No fix listed CWE-120
Priority MEDIUM 47
A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02409 · Published 2021-09-07 · Fixed in 8.6.0.4-2.2.0.4 CWE-120
Priority MEDIUM 46
An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor controllers in Aruba 9000 Ga…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02076 · Published 2020-12-11 · No fix listed CWE-77
Priority MEDIUM 45
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 43
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01226 · Published 2026-05-12 · No fix listed CWE-77
Priority MEDIUM 43
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01668 · Published 2022-11-03 · Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 42
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00896 · Published 2026-05-12 · No fix listed CWE-77
Priority MEDIUM 42
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00896 · Published 2026-05-12 · No fix listed CWE-77
Priority MEDIUM 42
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00896 · Published 2026-05-12 · No fix listed CWE-77
Priority MEDIUM 42
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00896 · Published 2026-05-12 · No fix listed CWE-77
Priority MEDIUM 42
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00896 · Published 2026-05-12 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00957 · Published 2022-11-03 · Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-1236
Priority MEDIUM 42
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00885 · Published 2022-11-03 · Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-123
Load more