AR
Product
Arubaos
233
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 45High 121Medium 56Low 4
Watch
Add Arubaos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42395 | 9.8 | Aug 6 | There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack Affected: 10.3.0.0 before 10.4.1.4; 10.5.0.0 before 10.6.0.1 |
| CVE-2024-42394 | 9.8 | Aug 6 | There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack Affected: 10.3.0.0 before 10.4.1.4; 10.5.0.0 before 10.6.0.1 |
| CVE-2024-42393 | 9.8 | Aug 6 | There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack Affected: 10.3.0.0 before 10.4.1.4; 10.5.0.0 before 10.6.0.1 |
| CVE-2024-31473 | 9.8 | May 14 | There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-31472 | 9.8 | May 14 | There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-31471 | 9.8 | May 14 | There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-31470 | 9.8 | May 14 | There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-31469 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-31468 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-31467 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-31466 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2024-26305 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.5.4.0 before 8.10.0.12; 8.11.0.0 before 8.11.2.2; 10.4.0.0 before 10.4.1.1; 10.5.0.0 before 10.5.1.1 |
| CVE-2023-45616 | 9.8 | Nov 14 | There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 10.3.0.0 before 10.4.0.3; 10.5.0.0 |
| CVE-2023-45615 | 9.8 | Nov 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.4.0.3; 10.5.0.0 |
| CVE-2023-45614 | 9.8 | Nov 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.4.0.3; 10.5.0.0 |
| CVE-2023-35982 | 9.8 | Jul 25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.4.0.0 before 10.4.0.2 |
| CVE-2023-35981 | 9.8 | Jul 25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.4.0.0 before 10.4.0.2 |
| CVE-2023-35980 | 9.8 | Jul 25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.4.0.0 before 10.4.0.2 |
| CVE-2023-22757 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22756 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22755 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22754 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22753 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22752 | 9.8 | Mar 1 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22751 | 9.8 | Mar 1 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22750 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22749 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22748 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22747 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2022-37897 | 9.8 | Dec 12 | There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP… Affected: 6.5.4.0 before 6.5.4.23; 8.4.0.0 before 8.6.0.18; 8.7.0.0 before 8.7.1.10; 8.8.0.0 before 8.10.0.0; 10.3.0.0 |
| CVE-2022-37889 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2022-37891 | 9.8 | Oct 7 | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2022-37890 | 9.8 | Oct 7 | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2022-37885 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2022-37886 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2022-37887 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2022-37888 | 9.8 | Oct 6 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2021-37716 | 9.8 | Sep 7 | A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to… Affected: 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.8; 8.7.0.0 before 8.7.1.2 |
| CVE-2020-24634 | 9.8 | Dec 11 | An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of… Affected: before 8.2.2.10; 8.3.0.0 before 8.3.0.14; 8.4.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.6; 8.7.0.0 before 8.7.1.0 |
| CVE-2020-24633 | 9.8 | Dec 11 | There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba… Affected: before 6.4.4.24; 6.5.0.0 before 6.5.4.18; 8.0.0.0 before 8.2.2.10; 8.3.0.0 before 8.3.0.14; 8.4.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.6; +1 more |
| CVE-2016-2031 | 9.8 | Jan 31 | Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which… Affected: All versions, or not specified |
| CVE-2018-7081 | 9.8 | Sep 13 | A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS Affected: before 6.4.4.21; 6.5.0.0 before 6.5.4.13; 8.0.0.0 before 8.2.2.6; 8.3.0.0 before 8.3.0.7; 8.4.0.0 before 8.4.0.3; 8.4.0.4 before 8.5.0.0 |
| CVE-2017-14491 | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: 6.3.1 before 6.3.1.25; 6.4.4.0 before 6.4.4.16; 6.5.0.0 before 6.5.1.9; 6.5.3.0 before 6.5.3.3; 6.5.4.0 before 6.5.4.2; 8.1.0.0 before 8.1.0.4 |
| CVE-2025-37168 | 9.1 | Jan 13 | Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System Affected: 6.5.4.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1; 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2 |
| CVE-2024-25614 | 9.1 | Mar 5 | There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0 |
Showing 45