CVE-2019-5314

CVE-2019-5314 concerns ArubaOS web components vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. The public descriptions state an attacker could trigger this by sending specific URL parameters. The connected records confirm affected software class (ArubaOS) and the underlyi...

CVE-2018-7081

CVE-2018-7081 affects ArubaOS network-listening components on certain Mobility Controllers. The issue enables remote code execution when an attacker can send specially-crafted IP traffic to the device via the PAPI protocol over UDP port 8211. If successful, this could crash a process or allow arb...

CVE-2018-7081

A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code with...

The vulnerability of the ArubaOS operating systems, related to insufficient access control, allows attackers to gain access to arbitrary files on the device.

The vulnerability of the ArubaOS operating systems is related to insufficient access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to arbitrary files using the TCP ports 8080 or 8081...

The vulnerability of the ArubaOS operating systems arises from operations that occur outside of the buffer in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of the ArubaOS operating systems arises from operations that occur outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

CVE-2017-9003

Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirme...

CVE-2017-9000

ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An...

Design/Logic Flaw

ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An...

Memory corruption

Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirme...

CVE-2017-9003

Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirme...

CVE-2017-9000

CVE-2017-9000 affects ArubaOS on multiple branches (pre-6.3.1.25, pre-6.4.4.16, pre-6.5.1.9/6.5.2/6.5.3/6.5.4, and pre-8.1.0.4). It describes an unauthenticated arbitrary file access vulnerability that can be exploited by an unauthenticated attacker with network access to an Aruba Mobility Contro...

CVE-2017-9000

ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An...

CVE-2017-9003

ArubaOS contains multiple memory corruption flaws that could allow an unauthenticated user to crash ArubaOS processes, with potential to lead to remote code execution (not confirmed). Vulnerable component: memory corruption in ArubaOS. Affected software versions are not explicitly enumerated in t...

ArubaOS Multiple Vulnerabilities (2017-006)

The version of ArubaOS installed on the remote host is affected by multiple vulnerabilities, including SQL Injection, remote code execution, arbitrary file access, and multiple memory corruption flaws. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104176;...

ArubaOS WPA2 Key Reinstallation Vulnerabilities (KRACK)

The version of ArubaOS on the remote device is affected by multiple vulnerabilities related to the KRACK attacks. This may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network. Note: ArbuaOS devices are only vulnerable to CVE-2017-13077,...

PT-2017-3744 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is caused by a buffer overflow in memory, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service. Multiple memory corruption flaws are...

ArubaOS Multiple Vulnerabilities (ARUBA-PSA-2016-007)

ArubaOS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:arubanetworks:arubaos"; if...

Multiple vulnerabilities fixed in Aruba networks products

Multiple vulnerabilities have been discovered in various Aruba Networks products including Instant and ArubaOS access points, the Airwave management platform and the PAPI protocol that these systems mutually use. Some vulnerabilities have been fixed, others will be fixed in a future update, and f...

Aruba Authentication Bypass / Insecure Transport / Tons Of Issues

Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities ------------------------------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in Aruba AP, IAP and AMP devices. The Vulnerabilities were discovered during a bla...

ArubaOS Multiple Vulnerabilities (ARUBA-PSA-2015-011)

ArubaOS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:arubanetworks:arubaos"; if...