Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
16 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-35982 | ArubaOS 10.4.x.x: 10.4.0.1 and below ; InstantOS 8.11.x.x: 8.11.1.0 and below ; InstantOS 8.10.x.x: 8.10.0.6 and below ; … | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-35981 | ArubaOS 10.4.x.x: 10.4.0.1 and below ; InstantOS 8.11.x.x: 8.11.1.0 and below ; InstantOS 8.10.x.x: 8.10.0.6 and below ; … | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-35980 | ArubaOS 10.4.x.x: 10.4.0.1 and below ; InstantOS 8.11.x.x: 8.11.1.0 and below ; InstantOS 8.10.x.x: 8.10.0.6 and below ; … | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22791 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.19 and below ; … | Aruba InstantOS and ArubaOS 10 Sensitive Information Disclosure | MEDIUM 5.4 | 0.2 % | ||
| CVE-2023-22790 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.19 and below ; … | Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface | HIGH 8.8 | 1.6 % | ||
| CVE-2023-22789 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.19 and below ; … | Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface | HIGH 8.8 | 1.6 % | ||
| CVE-2023-22788 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.19 and below ; … | Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface | HIGH 8.8 | 1.6 % | ||
| CVE-2023-22787 | Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below ; Aruba InstantOS 6.5.x: 6.5.4.23 and below ; Aruba InstantOS 8.6.x: 8.6.0.19 and below ; … | Unauthenticated Denial of Service (DoS) in Aruba InstantOS or ArubaOS 10 Service Accessed via the PAPI Protocol | HIGH 7.5 | 0.8 % | ||
| CVE-2023-22786 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22785 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22784 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22783 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22782 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22781 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22780 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-22779 | InstantOS 8.10.x.x: 8.10.0.2 and below ; ArubaOS 10.3.x.x: 10.3.1.4 and below ; See reference document for further details | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | CRITICAL 9.8 | 2.1 % |