Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

HPE Aruba Networking formerly Aruba Networks has released security updates to address critical flaws impacting ArubaOS that could result in remote code execution RCE on affected systems. Of the 10 security defects, four are rated critical in severity - CVE-2024-26304 CVSS score: 9.8 -...

ArubaOS 8.10.x, 8.11.x, 10.4.x 10.5.x Multiple Vulnerabilities (ARUBA-PSA-2024-004)

The version of ArubaOS installed on the remote host is affected by multiple vulnerabilities: - There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's acces...

CVE-2024-26305

ArubaOS components (Mobility Conductor, Mobility Controllers, WLAN/SD-WAN Gateways) are affected by CVE-2024-26305 via a buffer overflow in the Utility daemon. An unauthenticated attacker can send crafted packets to the PAPI UDP port 8211 to achieve arbitrary code execution as a privileged OS use...