Advisories · Technology
Hewlett Packard Enterprise (HPE) ArubaOS (AOS).
Every CVE that names Hewlett Packard Enterprise (HPE) ArubaOS (AOS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.3 Low
Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 4.4 Medium
Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 4.9 Medium
Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Privilege escalation
- CVSS 5.3 Medium
Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 5.5 Medium
Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Privilege escalation
- CVSS 6.8 Medium
Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 6.8 Medium
Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 7.0 High
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 7.1 High
Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Information disclosure
- CVSS 7.1 High
Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Privilege escalation
- CVSS 7.1 High
Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 7.2 High
Authenticated Command Injection Vulnerabilities in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 7.2 High
Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 7.2 High
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 7.2 High
Authenticated Command Injection Vulnerabilities in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 7.2 High
Authenticated Command Injection Vulnerabilities in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 7.2 High
Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Broken access control
- CVSS 7.2 High
Improper Sanitization leads to Command Injection in AOS-8 Web Interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 7.5 High
Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 7.5 High
Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Denial of service
- CVSS 7.5 High
Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Denial of service
- CVSS 7.5 High
Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 7.8 High
Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 8.1 High
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 8.1 High
Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 8.1 High
Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 8.1 High
Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 8.1 High
Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Code injection
- Authentication bypass
- CVSS 8.2 High
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 8.2 High
Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 8.2 High
Authentication Bypass leads to Sensitive Information Disclosure in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 8.3 High
Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 8.3 High
Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 8.5 High
Authentication Bypass Leading to Remote Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 8.7 High
Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 8.8 High
Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 8.8 High
Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Authentication Bypass in the API allows Administrative Access of AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Information disclosure
- CVSS 9.6 CriticalCritical · CVSS 9+
Authentication Bypass leads to Unauthorized Access in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 9.6 CriticalCritical · CVSS 9+
Authentication Bypass Leading to Remote Code Execution in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 9.6 CriticalCritical · CVSS 9+
Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 9.6 CriticalCritical · CVSS 9+
Authentication Bypass Leading to Remote Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Authentication bypass
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Path traversal
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Command Injection Vulnerability in AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
- Memory corruption