HPESBNW04259 rev.2 - HPE Aruba 4100i, 6100, 6200, 6300, 6400, 8320, 8325, 8360, and 8400 Model Switches, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Unauthenticated Arbitrary Code Execution; Remote: Arbitrary Command Execution, Denial of Service DoS, Directory Traversal, Unauthorized Disclosure of Information, script injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are...

Aruba AOS-CX 命令注入漏洞

Aruba AOS-CX is a modern programmable network from Aruba, USA. A security vulnerability exists in the Aruba AOS-CX that can be exploited by an attacker to run code through the command line interface...

Aruba AOS-CX 跨站脚本漏洞

Aruba AOS-CX is a modern programmable network from Aruba, USA. The Aruba OS AOS-CX suffers from a cross-site scripting vulnerability that stems from a lack of filtering and escaping of user-submitted parameters in the software. An attacker can trigger cross-site scripting in AOS-CX via the...

Aruba AOS-CX 命令注入漏洞

Aruba AOS-CX is a modern programmable network from Aruba, USA. The Aruba AOS-CX has a security vulnerability that can be exploited by an attacker to run code through the network analysis engine...

Aruba AOS-CX 路径遍历漏洞

Aruba AOS-CX is a modern programmable network from Aruba, USA. A security vulnerability exists in Aruba OS AOS-CX that stems from the lack of effective filtering in the software for user-submitted path parameters. An attacker could use this vulnerability to traverse the directory of the AOS-CX in...

HPESBNW04238 rev.3 - HPE ArubaOS-CX 8000 Series Switches, Multiple UEFI Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Compromise of System Integrity, Elevated Privileges, Gain Extended Privileges, Increase in Privilege, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 8400 Switch Series s...

HPESBNW04239 rev.3 - HPE Aruba 9000 Series Gateways, Multiple UEFI Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Compromise of System Integrity, Elevated Privileges, Gain Extended Privileges, Increase in Privilege, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 9000 Gateway - See...

HPESBNW04237 rev.4 - HPE Aruba Analytics and Location Engine, Aruba Central On Prem (COP), and Aruba ClearPass Policy Manager, PwnKit (Polkit) Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine 2.2.0.1 and below Aruba ClearPass Policy Manager 6.10.3 and all previous versions Aruba Central On-Premises 2.5.x.x: 2.5.4.2 and below CVSS...

HPESBNW04216 rev.3 - HPE Aruba Silver Peak Orchestrator and Aruba IntroSpect, Apache Log4j Library Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Silver Peak Orchestrator - All customer managed Orchestrator and legacy GMS products are affected by these vulnerabilities Aruba...

The vulnerability of the Wi-Fi Aruba Instant deployment application, related to the operation that occurs outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Wi-Fi Aruba Instant deployment application relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to port 8211, using the Protocol Applicatio...

Aruba ClearPass Policy Manager SQL Injection Vulnerability (CNVD-2021-83781)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks.A SQL injection vulnerability exists in Aruba ClearPass Policy Manager, which stems from a remote SQL injection vulnerability in Aruba ClearPass Policy Manager. ...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-10721)

Aruba ClearPass Policy Manager is an application of Aruba, Inc. that provides wireless network security access management system Aruba ClearPass Policy Manager has a security vulnerability that stems from a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager version...

Aruba ClearPass Policy Manager Authorization Issue Vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks.A security vulnerability exists in Aruba ClearPass Policy Manager, which stems from a remote authentication bypass vulnerability in Aruba ClearPass Policy Manage...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability (CNVD-2021-80169)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information in the web interface...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80172)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could exploit the vulnerability to run arbitrary commands on the underlying host...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80166)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit this vulnerability to execute arbitrary commands...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could exploit the vulnerability to access sensitive information, which could lead to elevated privileges...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80164)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit this vulnerability to execute arbitrary commands...

HPE Aruba ClearPass Policy Manager SQL Injection Vulnerability (CNVD-2021-80170)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A SQL injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use this vulnerability to obtain and modify sensitive information in the underlying database...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability (CNVD-2021-80163)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to gain unauthorized access to sensitive information in the web interface...