CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

Crlf injection

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

Command injection

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a wa...

Remote code execution

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

CVE-2019-5315

The CVE-2019-5315 entry concerns ArubaOS (8.x) where the web management interface is vulnerable to a command‑injection through an authenticated user. The underlying issue allows arbitrary OS commands to be executed, enabling a malicious administrator to install backdoors or alter configuration in...

CVE-2019-5315

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a wa...

CVE-2019-5314

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

CVE-2019-5314

CVE-2019-5314 concerns ArubaOS web components vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. The public descriptions state an attacker could trigger this by sending specific URL parameters. The connected records confirm affected software class (ArubaOS) and the underlyi...

CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

CVE-2018-7081

CVE-2018-7081 affects ArubaOS network-listening components on certain Mobility Controllers. The issue enables remote code execution when an attacker can send specially-crafted IP traffic to the device via the PAPI protocol over UDP port 8211. If successful, this could crash a process or allow arb...

PT-2019-17576

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue concerns certain web components in the software that are susceptible to HTTP Response splitting CRLF injection and Reflected XSS. An attacker could exploit this by sending specific...

PT-2019-17577

Name of the Vulnerable Software and Affected Versions ArubaOS versions 8.x Description A command injection issue is present in the web management interface of ArubaOS, allowing an authenticated user to execute arbitrary commands on the underlying operating system. This could enable a malicious...

CVE-2019-5314: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

CVE-2019-5315: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a wa...

CVE-2018-7081: Improper Input Validation

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

PT-2019-11081

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: A remote code execution issue is present in network-listening components. An attacker could exploit this by transmitting specially-crafted IP traffic to a mobility controller, potentially...

The vulnerability of the ArubaOS operating systems, related to insufficient access control, allows attackers to gain access to arbitrary files on the device.

The vulnerability of the ArubaOS operating systems is related to insufficient access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to arbitrary files using the TCP ports 8080 or 8081...

The vulnerability of the ArubaOS operating systems arises from operations that occur outside of the buffer in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of the ArubaOS operating systems arises from operations that occur outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

CVE-2017-9003

Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirme...