HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 vulnerabilities

Product

HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10

by Hewlett Packard Enterprise (HPE) · last CVE Nov 5, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 2High 3Medium 1Low 0

Severity

All severities6 Critical2 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-42509	9.8	2%	Nov 5	Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol Affected: AOS-10.4.x.x: 10.4.1.4 and below through <=10.4.1.4; Instant AOS-8.12.x.x: 8.12.0.2 and below through <=8.12.0.2; Instant AOS-8.10.x.x: 8.10.0.13 and below through <=8.10.0.13
CVE-2024-47460	9.0	1%	Nov 5	Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol Affected: AOS-10.4.x.x: 10.4.1.4 and below through <=10.4.1.4; Instant AOS-8.12.x.x: 8.12.0.2 and below through <=8.12.0.2; Instant AOS-8.10.x.x: 8.10.0.13 and below through <=8.10.0.13
CVE-2024-47463	7.2	1%	Nov 5	Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE) Affected: AOS-10.4.x.x: 10.4.1.4 and below through <=10.4.1.4; Instant AOS-8.12.x.x: 8.12.0.2 and below through <=8.12.0.2; Instant AOS-8.10.x.x: 8.10.0.13 and below through <=8.10.0.13
CVE-2024-47462	7.2	1%	Nov 5	Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE) Affected: AOS-10.4.x.x: 10.4.1.4 and below through <=10.4.1.4; Instant AOS-8.12.x.x: 8.12.0.2 and below through <=8.12.0.2; Instant AOS-8.10.x.x: 8.10.0.13 and below through <=8.10.0.13
CVE-2024-47461	7.2	2%	Nov 5	Authenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10 Affected: AOS-10.4.x.x: 10.4.1.4 and below through <=10.4.1.4; Instant AOS-8.12.x.x: 8.12.0.2 and below through <=8.12.0.2; Instant AOS-8.10.x.x: 8.10.0.13 and below through <=8.10.0.13
CVE-2024-47464	6.8	1%	Nov 5	Authenticated Path Traversal Vulnerability Leads to a Remote Unauthorized Access to Files Affected: AOS-10.4.x.x: 10.4.1.4 and below through <=10.4.1.4; Instant AOS-8.12.x.x: 8.12.0.2 and below through <=8.12.0.2; Instant AOS-8.10.x.x: 8.10.0.13 and below through <=8.10.0.13