THREATIST.IORead the docs 57 records in Arubaos-cx · all components
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculati…
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input.
A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access.
A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
An authenticated command injection vulnerability exists in the AOS-CX command line interface.
An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Seri…
Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Ser…
An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine.
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands.
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system.
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input.
A buffer overflow vulnerability was found in the command line interface of AOS-CX.
A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior.
A command injection vulnerability exists in the AOS-CX Operating System.
A command injection vulnerability exists in the AOS-CX Operating System.
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution.
An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX.
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface.
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX.
Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection.
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX.