Known vulnerabilities in Hewlett Packard Enterprise (HPE) HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-47464 | An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10 | 6.8 Medium | Nov 5, 2024 |
| CVE-2024-47463 | An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface | 7.2 High | Nov 5, 2024 |
| CVE-2024-47462 | An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface | 7.2 High | Nov 5, 2024 |
| CVE-2024-47461 | An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface | 7.2 High | Nov 5, 2024 |
| CVE-2024-47460 | Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by… | 9.0 Critical | Nov 5, 2024 |
| CVE-2024-42509 | Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by… | 9.8 Critical | Nov 5, 2024 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20