IN
Product
Instantos
56
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 25High 23Medium 8Low 0
Watch
Add Instantos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42395 | 9.8 | Aug 6 | There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack Affected: 6.4.0.0 before 8.10.0.13; 8.12.0.0 before 8.12.0.2 |
| CVE-2024-42394 | 9.8 | Aug 6 | There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack Affected: 6.4.0.0 before 8.10.0.13; 8.12.0.0 before 8.12.0.2 |
| CVE-2024-42393 | 9.8 | Aug 6 | There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack Affected: 6.4.0.0 before 8.10.0.13; 8.12.0.0 before 8.12.0.2 |
| CVE-2024-31473 | 9.8 | May 14 | There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31472 | 9.8 | May 14 | There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31471 | 9.8 | May 14 | There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31470 | 9.8 | May 14 | There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31469 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31468 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31467 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31466 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2023-45616 | 9.8 | Nov 14 | There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45615 | 9.8 | Nov 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45614 | 9.8 | Nov 14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-35982 | 9.8 | Jul 25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.22; 6.5.0.0 before 6.5.4.25; 8.6.0.0 before 8.6.0.21; 8.10.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1 |
| CVE-2023-35981 | 9.8 | Jul 25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.22; 6.5.0.0 before 6.5.4.25; 8.6.0.0 before 8.6.0.21; 8.10.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1 |
| CVE-2023-35980 | 9.8 | Jul 25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.22; 6.5.0.0 before 6.5.4.25; 8.6.0.0 before 8.6.0.21; 8.10.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1 |
| CVE-2023-22786 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22785 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22784 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22783 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22782 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22781 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22780 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22779 | 9.8 | May 8 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2024-31477 | 8.8 | May 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31476 | 8.8 | May 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2023-22790 | 8.8 | May 8 | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22789 | 8.8 | May 8 | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-22788 | 8.8 | May 8 | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2024-31475 | 8.2 | May 14 | There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol) Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31474 | 8.2 | May 14 | There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol) Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2023-45619 | 8.2 | Nov 14 | There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol) Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45618 | 8.2 | Nov 14 | There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol) Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45617 | 8.2 | Nov 14 | There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol) Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2024-31482 | 7.5 | May 14 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31481 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31480 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31479 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2024-31478 | 7.5 | May 14 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2023-45624 | 7.5 | Nov 14 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45623 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45622 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45621 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45620 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-22787 | 7.5 | May 8 | An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10 Affected: 6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 |
| CVE-2023-45626 | 7.2 | Nov 14 | An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2023-45625 | 7.2 | Nov 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
| CVE-2024-31483 | 6.5 | May 14 | An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol Affected: 6.4.0.0 before 8.6.0.24; 8.7.0.0 before 8.10.0.11 |
| CVE-2023-45627 | 6.5 | Nov 14 | An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service Affected: 6.4.0.0 before 8.6.0.23; 8.10.0.0 before 8.10.0.9; 8.11.0.0 before 8.11.2.0 |
