CVE-2025-37140

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

CVE-2025-37148 Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability

A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to potentially disrupt network services and require manual intervention to restore...

HPESBNW04958 rev.1 - HPE Aruba Networking AOS-8 Instant AP and AOS-10 AP, Multiple Vulnerabilities

Potential Security Impact: Local: Bypass Security Restrictions, Denial of Service DoS; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 300 Series Access Points see Affected Products Aruba 303 Series Access Points see Affected Products Aruba 3...

PT-2025-41992

Name of the Vulnerable Software and Affected Versions AOS-8 Instant affected versions not specified AOS 10 affected versions not specified Description A flaw exists in how ethernet frames are processed, potentially allowing a remote attacker to cause a denial of service. Successful exploitation m...

SmartFabric OS10 Privilege Escalation

The vulnerability of the SmartFabric OS10 network operating system is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-48015

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Comma...

CVE-2024-48830

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Comman...

Dell SmartFabric OS10 security vulnerabilities

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. A security vulnerability exists in Dell SmartFabric OS10 that originates from an unwanted privilege execution that can be exploited by an attacker to cause an elevation of privilege...

PT-2024-8149 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.3.x through 10.5.6.x Description: The issue is related to insufficient access control in the network operating system, which could allow a low-privileged attacker with local access to potentially...

CVE-2024-39577

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability leading to code...

PT-2023-26847 · Dell · Dell Os10 Networking Switches

Name of the Vulnerable Software and Affected Versions: Dell OS10 Networking Switches versions 10.5.2.x and above Description: The issue is related to an Uncontrolled Resource Consumption Denial of Service vulnerability. When switches are configured with VLT and VRRP, a remote unauthenticated user...

SUSE CVE-2010-3810

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the History object, which allows remote attackers to spoof the location bar's URL or add URLs to the history via a cross-origin attack...

CVE-2021-36308

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system...

CVE-2021-36310

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...

DELL Dell Networking OS10 information leakage vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL, Inc. Dell Networking OS10 is vulnerable to information disclosure, which can be exploited by a low-privilege authenticated attacker to gain access to SNMP authentication failure messages...