CVE-2024-25615

ArubaOS 8.x Spectrum service (via PAPI) is affected by a DoS vulnerability rooted in insufficient input validation. An unauthenticated remote attacker can interrupt normal operation of the Spectrum service. Exposed versions: ArubaOS 8.x. The cited PT-2024-2047 advisory recommends upgrading to a f...

CVE-2024-25615

An unauthenticated Denial-of-Service DoS vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2024-25614

There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the...

CVE-2024-25614

CVE-2024-25614 describes an arbitrary file deletion vulnerability in the ArubaOS CLI. Exploitation could delete arbitrary files on the underlying OS, with potential denial-of-service and integrity impacts to Aruba controllers. Connected sources confirm ArubaOS CLI is the affected component and th...

CVE-2024-25614

There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the...

CVE-2024-25613

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2024-25613

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2024-25613

CVE-2024-25613 refers to authenticated command injection in the ArubaOS CLI. The core issue is a vulnerability that allows an authenticated attacker with access to the CLI to execute arbitrary commands with elevated privileges on the underlying OS. Affected context is ArubaOS-based appliances (Mo...

CVE-2024-25612

CVE-2024-25612 concerns ArubaOS, where an authenticated command-injection vulnerability in the ArubaOS CLI allows executing arbitrary commands as a privileged user. Public documentation ties this to ArubaOS versions earlier than 8.10.0.10, 8.11.2.1, 10.4.1.0, and 10.5.1.0 (per Nessus plugin ARUBA...

CVE-2024-25612

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2024-25612

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2024-25611

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2024-25611

CVE-2024-25611 : ArubaOS contains authenticated command injection in its command-line interface. Exploitation lets an authenticated attacker execute arbitrary commands as a privileged OS user, with high impact to confidentiality, integrity, and availability. Affected ArubaOS versions include thos...

CVE-2024-25611

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2024-1356

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2024-1356

CVE-2024-1356 affects ArubaOS CLI: authenticated command injection that allows executing arbitrary commands as a privileged OS user. Affected ArubaOS versions per the connected Nessus/Red Hat advisories include ArubaOS < 8.10.0.10, < 8.11.2.1, < 10.4.1.0, and

CVE-2024-1356

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

PT-2024-2094 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to...

PT-2024-2048 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE AUTH negotiation process. The scenarios in which disclosure...

Aruba Networks ArubaOS Security Vulnerabilities

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including Mobility Controllers and Mobility Access Switches from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that stems from certain configurations of ArubaOS that could result in...