Aruba Instant Denial of Service Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant has a denial of service vulnerability that can be exploited by an attacker to cause a system reboot via the PAPI protocol, which can lead to a denial of service...

CVE-2021-25149

The CVE-2021-25149 vulnerability affects Aruba Instant Access Point (IAP) products across Aruba Instant 6.4.x (≤6.4.4.8-4.2.4.17), 6.5.x (≤6.5.4.16), 8.3.x (≤8.3.0.12), 8.5.x (≤8.5.0.6), and 8.6.x (≤8.6.0.2). It is described as a remote buffer overflow in the PAPI UDP handling that could allow co...

CVE-2021-25148

CVE-2021-25148 affects Aruba Instant IAP devices. A remote arbitrary file modification vulnerability exists in Aruba Instant 6.5.x (≤6.5.4.17), 8.3.x (≤8.3.0.13), 8.5.x (≤8.5.0.10), and 8.6.x (≤8.6.0.4). The underlying issue allows an attacker to overwrite or modify files via remote interfaces (C...

CVE-2021-25148

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba h...

CVE-2021-25145

CVE-2021-25145 affects Aruba Instant IAPs (6.4.x, 6.5.x, 8.3.x, 8.5.x, 8.6.x, 8.7.x) with a remote unauthorized disclosure of information. Affected versions are listed in the initial CVE entry; Aruba has released patches. Remediation is to upgrade Aruba Instant to the patched versions as specifie...

CVE-2021-25145

A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.1...

CVE-2020-24635

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2021-25143

A remote denial of service dos vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that addre...

Design/Logic Flaw

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2020-24636

CVE-2020-24636 is a remote command-execution vulnerability affecting Aruba Instant IAPs. The issue exists in Aruba Instant 6.5.x (6.5.4.17 and below), 8.3.x (8.3.0.13 and below), 8.5.x (8.5.0.10 and below), 8.6.x (8.6.0.5 and below), and 8.7.x (8.7.0.0 and below). Siemens/Red Hat and other connec...

CVE-2020-24635

CVE-2020-24635 is a command-injection vulnerability in Aruba Instant IAPs (Aruba Instant CLI/Web UI) that allows remote execution of arbitrary commands with high privileges. Affected versions include Aruba Instant 6.5.x (≤6.5.4.17), 8.3.x (≤8.3.0.13), 8.5.x (≤8.5.0.10), 8.6.x (≤8.6.0.5), and 8.7....

CVE-2020-24635

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2021-25143

CVE-2021-25143 affects Aruba Instant Access Point (IAP) devices. A remote DoS was reported in Aruba Instant versions: 8.3.x (8.3.0.12 and below), 8.5.x (8.5.0.9 and below), and 8.6.x (8.6.0.4 and below). The issue is linked to the PAPI protocol, with patches released by Aruba to address it. Sieme...

CVE-2019-5317

CVE-2019-5317 describes a local authentication bypass in Aruba Instant Access Point (IAP) devices. Affected families include Aruba Instant 6.4.x (up to 6.4.4.8-4.2.4.18), 6.5.x (up to 6.5.4.15), 8.3.x (up to 8.3.0.11), 8.4.x (up to 8.4.0.5), 8.5.x (up to 8.5.0.6), and 8.6.x (up to 8.6.0.2). The v...

Aruba Access Points 命令注入漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

Aruba Access Points 操作系统命令注入漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the DHCP option of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

CVE-2021-1423

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points AP could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit...

CVE-2021-1449 Cisco Access Point Software Arbitrary Code Execution Vulnerability

A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The vulnerability is due to an improper check that is performed by the area of code that manages system startup processes. An attacker could exploi...

CVE-2021-1437

A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol TFTP...

PT-2021-2446 · Cisco · Cisco Aironet Series Access Points

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Series Access Points Software affected versions not specified Description: A vulnerability in the multicast DNS mDNS gateway feature could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on...