Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Acc
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-37896 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-si | MEDIUM 6.1 | 0.7 % | ||
| CVE-2022-37895 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. S | MEDIUM 4.9 | 0.9 % | ||
| CVE-2022-37894 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. S | MEDIUM 6.5 | 0.5 % | ||
| CVE-2022-37893 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitatio | HIGH 7.8 | 0.7 % | ||
| CVE-2022-37892 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a s | MEDIUM 5.4 | 0.7 % | ||
| CVE-2022-37891 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploit | CRITICAL 9.8 | 1.4 % | ||
| CVE-2022-37890 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploit | CRITICAL 9.8 | 1.4 % | ||
| CVE-2022-37889 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin | CRITICAL 9.8 | 2.1 % | ||
| CVE-2022-37887 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin | CRITICAL 9.8 | 2.1 % | ||
| CVE-2022-37886 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin | CRITICAL 9.8 | 1.9 % | ||
| CVE-2022-37885 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin | CRITICAL 9.8 | 1.9 % | ||
| CVE-2022-37888 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.18 and below ; … | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin | CRITICAL 9.8 | 2.1 % |