ArubaOS Wi-Fi Controllers and Campus/Remote Access Points vulnerabilities

Product

ArubaOS Wi-Fi Controllers and Campus/Remote Access Points

by Hewlett Packard Enterprise (HPE) · last CVE Mar 5, 2024

CVEs

On KEV

9.1

Max CVSS

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 4Medium 1Low 1

Severity

All severities7 Critical1 High4 Medium1 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ArubaOS Wi-Fi Controllers and Campus/Remote Access Points to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-25614	9.1	1%	Mar 5	There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS Affected: ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below
CVE-2024-25613	7.2	1%	Mar 5	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below
CVE-2024-25612	7.2	1%	Mar 5	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below
CVE-2024-25611	7.2	1%	Mar 5	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below
CVE-2024-1356	7.2	1%	Mar 5	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below
CVE-2024-25615	5.3	0%	Mar 5	An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x Affected: ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below
CVE-2024-25616	3.7	0%	Mar 5	Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process Affected: ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below