ArubaOS Arbitrary Code Execution Vulnerability

Aruba OS is the operating system and application engine for all Aruba mobile controllers and access units. A security vulnerability in the ArubaOS "RAP console" feature on Aruba access points in Remote Access Point AP mode could be exploited by an attacker to conduct an arbitrary command executio...

CVE-2015-1388

The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point AP mode allows remote attackers to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point AP mode allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2015-1388

The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point AP mode allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2015-1388

The CVE-2015-1388 entry applies to ArubaOS RAP (Remote Access Point) in Aruba access points operating in RAP mode. The vulnerability affects ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4, allowing a remote attacker to execute arbitrary commands via unspecified vectors...

CVE-2015-1388: Improper Neutralization of Special Elements used in an OS Command

The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point AP mode allows remote attackers to execute arbitrary commands via unspecified vectors...

PT-2015-5259

Name of the Vulnerable Software and Affected Versions ArubaOS versions 5.x through 6.2.x ArubaOS versions 6.3.x before 6.3.1.15 ArubaOS versions 6.4.x before 6.4.2.4 Description The issue affects the "RAP console" feature on Aruba access points in Remote Access Point AP mode, allowing remote...

ArubaOS Detection

Binary data arubaosdetect.nbin...

ArubaOS 6.3.1.11 / 6.4.2.1 SSH Authentication Bypass

The version of ArubaOS has an unspecified vulnerability that allows a remote attacker to obtain limited administrative privileges without valid credentials. The vulnerability affects access over SSH. However, access through WebUI and the serial port is not affected, and the vulnerability does not...

CVE-2014-7299

Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session...

Authentication flaw

Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session...

CVE-2014-7299

Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session...

CVE-2014-7299

The CVE-2014-7299 entry describes an authentication bypass in ArubaOS on Aruba controllers (versions 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, 6.4.2.1-FIPS) that can be exploited remotely over SSH to bypass authentication and potentially obtain sensitive information or add guest accounts. The NVD entry l...

PT-2014-7891

Name of the Vulnerable Software and Affected Versions ArubaOS versions 6.3.1.11 through 6.3.1.11-FIPS ArubaOS versions 6.4.2.1 through 6.4.2.1-FIPS Description The issue allows remote attackers to bypass authentication and obtain potentially sensitive information or add guest accounts via an SSH...

CVE-2014-7299: Undefined Security Weakness

Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session...

CVE-2013-2290

Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...

Cross site scripting

Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...

CVE-2013-2290

CVE-2013-2290 is a Cross-site Scripting (XSS) vulnerability in the ArubaOS Administration WebUI dashboard used by Mobility Controller. The issue allows an attacker to inject arbitrary web script or HTML via a crafted SSID, affecting ArubaOS 6.2.x before 6.2.0.3; 6.1.3.x before 6.1.3.7; 6.1.x-FIPS...

CVE-2013-2290

Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...

PT-2013-3638

Name of the Vulnerable Software and Affected Versions ArubaOS versions 6.1.x-AirGroup before 6.1.3.6-AirGroup ArubaOS versions 6.1.x-FIPS before 6.1.4.3-FIPS ArubaOS versions 6.1.3.x before 6.1.3.7 ArubaOS versions 6.2.x before 6.2.0.3 Description A cross-site scripting XSS issue exists in the...