AM
Product
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 22Medium 13Low 1
Watch
Add Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-35977 | 6.5 | Jul 5 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-35976 | 6.5 | Jul 5 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-22777 | 6.5 | Feb 28 | Authenticated Information Disclosure in ArubaOS Web-based Management Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22775 | 6.5 | Feb 28 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22774 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22773 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22772 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-35978 | 6.1 | Jul 5 | Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2023-35971 | 6.1 | Jul 5 | Unauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface Affected: - ArubaOS 10.4.x.x: 10.4.0.1 and below; - ArubaOS 8.11.x.x: 8.11.1.0 and below; - ArubaOS 8.10.x.x: 8.10.0.6 and below; - ArubaOS 8.6.x.x: 8.6.0.20 and below |
| CVE-2024-33513 | 5.9 | May 1 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-33518 | 5.3 | May 1 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2023-22776 | 4.9 | Feb 28 | Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22778 | 4.8 | Feb 28 | Authenticated Stored Cross-Site Scripting Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
Showing 13