3.7
Low
CVE-2024-25616 Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in…
Description
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | Versions not published |
Other CVEs of ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
The 7 CVEs of ArubaOS Wi-Fi Controllers and Campus/Remote Access Points →
CVE-2024-25615
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol…
5.3
Medium
CVE-2024-25614
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS
5.5
Medium
CVE-2024-25613
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
High
CVE-2024-25612
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
High