AM
Product
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 22Medium 13Low 1
Watch
Add Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33512 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-33511 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-26305 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-26304 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2023-22757 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22756 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22755 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22754 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22753 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22752 | 9.8 | Feb 28 | Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22751 | 9.8 | Feb 28 | Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22750 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22749 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22748 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22747 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-35975 | 8.1 | Jul 5 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2024-33517 | 7.5 | May 1 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-33516 | 7.5 | May 1 | An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-33515 | 7.5 | May 1 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-33514 | 7.5 | May 1 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2023-35979 | 7.5 | Jul 5 | Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-35974 | 7.2 | Jul 5 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-35973 | 7.2 | Jul 5 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-35972 | 7.2 | Jul 5 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-22770 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22769 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22768 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22767 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22766 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22765 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22764 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22763 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22762 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22761 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22760 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22759 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22758 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-35977 | 6.5 | Jul 5 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-35976 | 6.5 | Jul 5 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-22777 | 6.5 | Feb 28 | Authenticated Information Disclosure in ArubaOS Web-based Management Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22775 | 6.5 | Feb 28 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22774 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22773 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22772 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-35978 | 6.1 | Jul 5 | Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-35971 | 6.1 | Jul 5 | Unauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2024-33513 | 5.9 | May 1 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-33518 | 5.3 | May 1 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2023-22776 | 4.9 | Feb 28 | Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22778 | 4.8 | Feb 28 | Authenticated Stored Cross-Site Scripting Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |