Priority LOW 28
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2022-10-07 · No fix listed CWE-79
Priority LOW 24
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00858 · Published 2022-10-07 · No fix listed
Priority LOW 29
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00456 · Published 2022-10-07 · No fix listed
Priority LOW 35
An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0073 · Published 2022-10-07 · No fix listed CWE-78
Priority LOW 26
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00714 · Published 2022-10-07 · No fix listed CWE-79
Priority MEDIUM 45
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01416 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 45
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01416 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0213 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0213 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01868 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01868 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02054 · Published 2022-10-06 · No fix listed CWE-120
Priority MEDIUM 47
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02694 · Published 2021-03-30 · No fix listed CWE-120
Priority MEDIUM 44
A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.16372 · Published 2021-03-30 · No fix listed CWE-79
Priority MEDIUM 57
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and be…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.25765 · Published 2021-03-30 · No fix listed CWE-78
Priority LOW 32
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.06607 · Published 2021-03-30 · No fix listed
Priority MEDIUM 43
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.12573 · Published 2021-03-30 · No fix listed
Priority LOW 35
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba I…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.10259 · Published 2021-03-30 · No fix listed
Priority MEDIUM 50
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.30459 · Published 2021-03-30 · No fix listed CWE-362
Priority MEDIUM 50
A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.3965 · Published 2021-03-30 · No fix listed
Priority MEDIUM 43
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.1242 · Published 2021-03-30 · No fix listed
Priority MEDIUM 44
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03152 · Published 2021-03-30 · No fix listed CWE-78
Priority LOW 37
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03018 · Published 2021-03-30 · No fix listed CWE-78
Priority MEDIUM 46
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01828 · Published 2021-03-29 · No fix listed CWE-120
Priority LOW 37
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba I…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01018 · Published 2021-03-29 · No fix listed
Load more