Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Acc
14 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-45627 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in t | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-45626 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code | HIGH 7.2 | 0.9 % | ||
| CVE-2023-45625 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabiliti | HIGH 7.2 | 1.8 % | ||
| CVE-2023-45624 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitatio | HIGH 7.5 | 0.9 % | ||
| CVE-2023-45623 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploit | HIGH 7.5 | 0.9 % | ||
| CVE-2023-45622 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitat | HIGH 7.5 | 0.9 % | ||
| CVE-2023-45621 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of | HIGH 7.5 | 0.9 % | ||
| CVE-2023-45620 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of | HIGH 7.5 | 0.9 % | ||
| CVE-2023-45619 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successfu | HIGH 8.2 | 0.7 % | ||
| CVE-2023-45618 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). | HIGH 8.2 | 0.7 % | ||
| CVE-2023-45617 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful | HIGH 8.2 | 0.7 % | ||
| CVE-2023-45616 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution b | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-45615 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-45614 | ArubaOS 10.5.x.x: 10.5.0.0 and below ; ArubaOS 10.4.x.x: 10.4.0.2 and below ; InstantOS 8.11.x.x: 8.11.1.2 and below ; … | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending | CRITICAL 9.8 | 2.1 % |