HPESBNW04535 rev.2 - HPE Aruba 9200 and 9000 Series Controllers and Gateways running ArubaOS, Multiple Vulnerabilities

Potential Security Impact: Remote: Compromise of System Integrity, Execution of Arbitrary Code With Root Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 9000 Gateway See Vulnerability Summary for Details Aruba 9200 Series Campus Gateways See Vulnerability Summary...

CVE-2022-37890

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS...

CVE-2021-37724

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability...

Aruba Advisory ID: AID-42309 Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication. Aruba Advisory ID: AID-42309 Revision: 1.0 For Public Release on 4/23/2009...