Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0)

The version of AOS installed on the remote host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A...

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

Hewlett Packard Enterprise HPE has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including two critical bugs that could result in unauthenticated command execution. The flaws affect Access Points running Instant AOS-8 and AOS-10 -...

CVE-2024-47463

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...

CVE-2024-47464

An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote...

CVE-2024-47462

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...

CVE-2024-47464

CVE-2024-47464 affects Hewlett Packard Enterprise ArubaOS Instant AOS-8 and AOS-10. It is described as an authenticated path traversal vulnerability in the CLI that could copy arbitrary files from the underlying OS to a user-readable location, potentially enabling remote unauthorized access to fi...

CVE-2024-47464 Authenticated Path Traversal Vulnerability Leads to a Remote Unauthorized Access to Files

An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote...

CVE-2024-47463 Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...

CVE-2024-47463

CVE-2024-47463 describes an arbitrary file creation vulnerability in Aruba Instant AOS-8 and AOS-10 CLI service that, when exploited by an authenticated user, could lead to remote code execution on the underlying OS. The issue affects the CLI path and is tied to authenticated remote command execu...

CVE-2024-47463 Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...

CVE-2024-47462

CVE-2024-47462 affects Hewlett Packard Enterprise Aruba Instant AOS-8 and AOS-10, describing an arbitrary file creation vulnerability in the CLI that could allow an authenticated remote attacker to create arbitrary files and, per the advisory, lead to remote code execution on the underlying OS. T...

CVE-2024-47462 Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...

CVE-2024-47462 Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...

CVE-2024-47461 Authenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10

An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to...

CVE-2024-47461

CVE-2024-47461 is an authenticated command-injection flaw in Aruba Instant AOS-8 and AOS-10 CLI that allows arbitrary commands to run with high privileges, potentially compromising the OS. Affected components: Instant AOS-8/AOS-10 CLI. Root cause: authenticated RCE via command injection in the CL...

CVE-2024-47461 Authenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10

An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to...

PT-2024-9192

Name of the Vulnerable Software and Affected Versions: Instant AOS versions 8 and 10 Description: An authenticated command injection vulnerability exists in the command line interface of Instant AOS. This vulnerability allows an attacker to execute arbitrary commands as a privileged user on the...

PT-2024-9191

Name of the Vulnerable Software and Affected Versions: Instant AOS versions 8 through 10 Description: The issue is related to an arbitrary file creation vulnerability in the command line interface CLI of the affected operating systems. This vulnerability could allow an authenticated remote attack...

PT-2024-9195

Name of the Vulnerable Software and Affected Versions: Aruba Instant AOS-8 and AOS-10 versions affected versions not specified Description: A command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets...

PT-2024-9190

Name of the Vulnerable Software and Affected Versions: Instant AOS versions 8 and 10 Description: An arbitrary file creation issue exists in the command line interface of Instant AOS-8 and AOS-10. This could allow an authenticated remote attacker to create arbitrary files, potentially leading to...