Lucene search
+L

160 matches found

CNNVD
CNNVD
added 2023/07/25 12:00 a.m.11 views

Aruba Networks ArubaOS和InstantOS 安全漏洞

Aruba Networks ArubaOS and Aruba Networks InstantOS are both products of Aruba Networks, Inc. Aruba Networks InstantOS is an Arch Linux-based distribution. Aruba Networks ArubaOS and InstantOS have a security vulnerability that originates from a buffer overflow vulnerability in multiple underlyin...

9.8CVSS8.8AI score0.02068EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/13 12:00 a.m.13 views

The vulnerability in the web interface for operating systems ArubaOS allows a hacker to increase their privileges and execute arbitrary commands.

The vulnerability of the ArubaOS operating system’s web management interface is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary...

8.5CVSS7.4AI score0.01566EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/07/05 12:00 a.m.10 views

Aruba Networks ArubaOS 命令注入漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. Aruba Networks ArubaOS suffers from a command injection vulnerability that originates from an authenticated command injection i...

7.2CVSS7.6AI score0.0136EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/05 12:00 a.m.8 views

Aruba Networks ArubaOS 命令注入漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that stems from an authenticated remote command injection...

7.2CVSS7.6AI score0.01566EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/05 12:00 a.m.11 views

Aruba Networks ArubaOS 命令注入漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. Aruba Networks ArubaOS suffers from a command injection vulnerability that originates from an authenticated command injection i...

7.2CVSS7.6AI score0.0136EPSS
SaveExploits0References2
NCSC
NCSC
added 2023/05/11 12:00 a.m.49 views

Vulnerabilities fixed in Aruba Networks ArubaOS and InstantOS

Aruba Networks has fixed vulnerabilities in systems running run on ArubaOS and InstantOS. An unauthenticated malicious party could exploit the vulnerabilities to cause a denial-of-service, gain access to system data or execute code on the underlying system with user privileges. To exploit the...

9.8CVSS7.5AI score0.02118EPSS
SaveExploits0
Circl
Circl
added 2023/05/10 1:22 p.m.11 views

CVE-2023-22783

creationtimestamp| type| source ---|---|--- 2023-05-10 13:22:06+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-arubaos-und-aruba-instantos-updates-verfugbar...

9.8CVSS9AI score0.02068EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/08 3:15 p.m.8 views

CVE-2023-22787

An unauthenticated Denial of Service DoS vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

7.5CVSS5.8AI score0.00843EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/08 12:00 a.m.9 views

Aruba Networks InstantOS 命令注入漏洞

Aruba Networks InstantOS is an Arch Linux-based distribution from Aruba Networks. A security vulnerability exists in Aruba Networks InstantOS and ArubaOS 10. An attacker could exploit the vulnerability to execute arbitrary commands on the underlying operating system as a privileged user...

8.8CVSS8.4AI score0.01704EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/08 12:00 a.m.9 views

Aruba Networks InstantOS 安全漏洞

Aruba Networks InstantOS is an Arch Linux-based distribution from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks InstantOS and ArubaOS 10, which stems from a buffer overflow vulnerability in the underlying service that can be exploited by an attacker to execute arbitrary...

9.8CVSS9.2AI score0.02068EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:00 a.m.25 views

Siemens SCALANCE Command Injection (CVE-2021-37723)

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability. This plugin only works with Tenable.ot. Please visit...

9CVSS7.2AI score0.03055EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:00 a.m.29 views

Siemens SCALANCE Cross-Site Request Forgery (CVE-2019-5318)

A remote cross-site request forgery csrf vulnerability was discovered in Aruba Operating System Software versions: 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability. This plugin only works with Tenable.ot...

7.1CVSS6.8AI score0.00388EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:00 a.m.20 views

Siemens SCALANCE W1750D Command Injection (CVE-2021-37724)

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability. This plugin only works with Tenable.ot. Please visit...

9CVSS7.6AI score0.03055EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:00 a.m.29 views

Siemens SCALANCE Command Injection (CVE-2021-37718)

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS...

9CVSS7.2AI score0.03055EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:00 a.m.29 views

Siemens SCALANCE Command Injection (CVE-2021-37720)

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...

9CVSS7.2AI score0.03055EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:00 a.m.11 views

A vulnerability in the web interface for operating systems ArubaOS, allowing a hacker to read arbitrary files

The vulnerability in the web interface for operating systems ArubaOS relates to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

6.8CVSS6.8AI score0.00589EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/02 12:00 a.m.9 views

A vulnerability in the web interface for operating systems ArubaOS, which allows a hacker to delete any files they desire.

The vulnerability in the web interface for operating systems ArubaOS is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to delete any files remotely...

8.5CVSS6.6AI score0.00747EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:00 a.m.9 views

The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0174EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:00 a.m.13 views

The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0174EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:00 a.m.7 views

The vulnerability of the command-line interface of ArubaOS allows a attacker to execute arbitrary operating system commands.

The vulnerability of the command-line interface of ArubaOS exists because measures to neutralize the special elements used in the operating system’s command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system...

8.3CVSS7.5AI score0.01481EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder