Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

62 records

Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01868 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01868 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02054 Published 2022-10-06 No fix listed CWE-120
Priority MEDIUM 54

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculati…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.24639 Published 2021-11-11 No fix listed CWE-400
TI-2021-15609 CVE-2021-37734 · GHSA-3q59-83xj-cggf

Path traversal in HPE Aruba Instant

Priority LOW 31

A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.19 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and bel…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00977 Published 2021-10-12 No fix listed CWE-22
TI-2021-15607 CVE-2021-37732 · GHSA-2p98-83jv-9mj3

OS command injection in HPE Aruba Instant

Priority LOW 37

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03055 Published 2021-10-12 No fix listed CWE-78
TI-2021-15602 CVE-2021-37727 · GHSA-8hpj-q858-pv9c

OS command injection in HPE Aruba Instant

Priority LOW 37

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03055 Published 2021-10-12 No fix listed CWE-78
TI-2021-15605 CVE-2021-37730 · GHSA-56x8-fr2v-932f

OS command injection in HPE Aruba Instant

Priority LOW 37

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03055 Published 2021-10-12 No fix listed CWE-78
TI-2021-15601 CVE-2021-37726 · GHSA-gmgh-mrc4-vrr5

Buffer overflow in HPE Aruba Instant

Priority MEDIUM 47

A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02409 Published 2021-10-12 No fix listed CWE-120
Priority LOW 28

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16.

CVSS 3.1MEDIUM 6.2 Physical High privileges No interaction EPSS 0.00325 Published 2021-09-07 Fixed in 8.6.0.0-2.2.0.4 CWE-22
Priority LOW 35

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.8.0.1, 8.7.1.2, 8.6.0.8, 8.5…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00398 Published 2021-09-07 Fixed in 8.6.0.4-2.2.0.4 CWE-352
Priority LOW 25

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8.3.0.16.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01153 Published 2021-09-07 Fixed in 8.6.0.4-2.2.0.4 CWE-22
Priority LOW 31

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0099 Published 2021-09-07 Fixed in 8.6.0.0-2.2.0.4 CWE-22
Priority LOW 31

A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01054 Published 2021-09-07 No fix listed CWE-22
Priority LOW 37

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03055 Published 2021-09-07 Fixed in 8.6.0.4-2.2.0.4 CWE-77
Load more