Read the docs

Hewlett Packard Enterprise

Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

56 records in Instantos · all components

Priority MEDIUM 53

There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-05-08 No fix listed CWE-120
Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02118 Published 2023-05-08 No fix listed CWE-120
Priority MEDIUM 52

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01651 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poin…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 52

There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acce…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2024-05-14 No fix listed CWE-78
Priority MEDIUM 51

There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01188 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acces…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acces…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 51

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2024-05-14 No fix listed CWE-121
Priority MEDIUM 47

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02118 Published 2023-05-08 No fix listed CWE-120
Priority MEDIUM 47

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-05-08 No fix listed CWE-120
Priority MEDIUM 47

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-05-08 No fix listed CWE-120
Priority MEDIUM 47

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-05-08 No fix listed CWE-120
Priority MEDIUM 47

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-05-08 No fix listed CWE-120
Priority MEDIUM 47

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-05-08 No fix listed CWE-120
Load more
Open these records in search →