Path traversal

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...

Path traversal

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and...

CVE-2021-37731

CVE-2021-37731 describes a local path traversal in Aruba SD-WAN Software and Gateways / ArubaOS. Affected are Aruba SD-WAN Software and ArubaOS versions prior to 8.6.0.0-2.2.0.4 and prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches addressing this vulnerability. Exploitati...

CVE-2021-37733

CVE-2021-37733 is a remote path traversal vulnerability in Aruba SD-WAN Software and Gateways and ArubaOS. Affected products include Aruba SD-WAN Software and Gateways and ArubaOS; vulnerable if running version(s) prior to 8.6.0.4-2.2.0.4, and prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, or 8.3.0.16. The...

CVE-2021-37733

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address...

CVE-2021-37729

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and...

CVE-2021-37718

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS...

CVE-2021-37718

CVE-2021-37718 (Aruba SD-WAN / ArubaOS) is a remote arbitrary command execution vulnerability. The vulnerability affects Aruba SD-WAN Software and Gateways and ArubaOS on several old releases, including Aruba Operating System Software versions prior to 8.6.0.4-2.2.0.6 and prior to 8.7.1.4, 8.6.0....

CVE-2021-37722

CVE-2021-37722 is a remote arbitrary command execution vulnerability in Aruba SD-WAN Software and Gateways and ArubaOS. Affected are Aruba SD-WAN Software and Gateways and various ArubaOS versions listed as pre-patch (e.g., prior to several 8.x.x.x and 6.x.x.x releases). Aruba has released patche...

CVE-2021-37720

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...

CVE-2021-37720

CVE-2021-37720 is a remote arbitrary command execution vulnerability in Aruba SD-WAN Software and Gateways and ArubaOS. Affected software includes Aruba SD-WAN Software and Gateways and ArubaOS versions prior to 8.6.0.4-2.2.0.4; prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. A...

CVE-2021-37719

CVE-2021-37719 is a remote arbitrary command execution in Aruba SD-WAN Software and Gateways and ArubaOS. Affected versions include ArubaOS prior to 8.6.0.4-2.2.0.4 and prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba/Siemens advisories note patches are available and recom...

CVE-2021-37716

CVE-2021-37716 describes a remote buffer overflow in Aruba OS/SD-WAN components that can be triggered by malformed PAPI packets sent to UDP port 8211, affecting Aruba SD-WAN Software and Gateways and ArubaOS. Affected versions include prior to 8.6.0.4-2.2.0.4 and prior to 8.7.1.2, 8.6.0.8, 8.5.0....

Aruba Operating System 命令注入漏洞

Aruba Networks Aruba Operating System is the operating system for Aruba Controller-managed wireless LANs and Aruba Mobility Controllers from Aruba Networks, USA. A security vulnerability exists in the Aruba Operating System that stems from a remote arbitrary command execution vulnerability found ...

Aruba Networks ArubaOS Operating System Command Injection Vulnerability (CNVD-2021-71258)

Aruba Networks ArubaOS, an operating system for Aruba Mobility-Defined Networks including Mobility Controllers and Mobile Access Switches from Aruba Networks, is vulnerable to a command injection vulnerability. A remote arbitrary command execution vulnerability has been identified in Aruba SD-WAN...

Aruba Networks ArubaOS 命令注入漏洞

Aruba Networks ArubaOS, an operating system for Aruba Mobility-Defined Networks including Mobility Controllers and Mobile Access Switches from Aruba Networks, is vulnerable to a command injection vulnerability. A remote arbitrary command execution vulnerability has been identified in Aruba SD-WAN...

Mozi IoT Botnet Now Also Targets Netgear, Huawei, and ZTE Network Gateways

Mozi, a peer-to-peer P2P botnet known to target IoT devices, has gained new capabilities that allow it to achieve persistence on network gateways manufactured by Netgear, Huawei, and ZTE, according to latest findings. "Network gateways are a particularly juicy target for adversaries because they...

How to proactively defend against Mozi IoT botnet

Mozi is a peer-to-peer P2P botnet that uses a BitTorrent-like network to infect IoT devices such as network gateways and digital video records DVRs. It works by exploiting weak telnet passwords1 and nearly a dozen unpatched IoT vulnerabilities2 and it’s been used to conduct distributed...

How to proactively defend against Mozi IoT botnet

Mozi is a peer-to-peer P2P botnet that uses a BitTorrent-like network to infect IoT devices such as network gateways and digital video records DVRs. It works by exploiting weak telnet passwords1 and nearly a dozen unpatched IoT vulnerabilities2 and it’s been used to conduct distributed...