Known vulnerabilities in Hewlett Packard Enterprise (HPE) ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-25616 | Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in… | 3.7 Low | Mar 5, 2024 |
| CVE-2024-25615 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol… | 5.3 Medium | Mar 5, 2024 |
| CVE-2024-25614 | There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS | 5.5 Medium | Mar 5, 2024 |
| CVE-2024-25613 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Mar 5, 2024 |
| CVE-2024-25612 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Mar 5, 2024 |
| CVE-2024-25611 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Mar 5, 2024 |
| CVE-2024-1356 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Mar 5, 2024 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20