Security News
Five critical remote code execution vulnerabilities in millions Aruba and Avaya devices can be exploited by cybercriminals to take full control of network switches commonly used in airports, hospitals, and hotels, according to Armis researchers. The flaws affect about 10 million devices across HPE's Aruba and Extreme Networks' Avaya switching portfolio, and have severity scores ranging from 9.0 to 9.8 out of 10.
HPE has disclosed that data repositories for their Aruba Central network monitoring platform were compromised, allowing a threat actor to access collected data about monitored devices and their locations. HPE disclosed today that a threat actor obtained an "Access key" that allowed them to view customer data stored in the Aruba Central environment.
The new CX 10000 integrates security services, like a firewall, directly into a one-unit network switch deployable anywhere security and other services need to reside. Aruba has announced a new single-unit networking switch that it describes as "The industry's first distributed services switch." If Aruba is correct, its new CX 10000 could be a game changer for companies who gather data at, or otherwise make use of, edge locations.
Rated high in severity, HPE warns the Sudo flaw could be part of a "Chained attack" where an "Attacker has achieved a foothold with lower privileges via another vulnerability and then uses this to escalate privileges," according to a recent HPE security bulletin. Sudo is a program used by other platforms that "Allows a system administrator to delegate authority to give certain users the ability to run some commands as root or another user," according to the Sudo license.
Aruba announced the Wi-Fi 6E solution set - the 630 Series of campus access points, starting with the AP-635. "With connectivity demands growing exponentially, Wi-Fi 6E can take advantage of up to seven, superwide 160 MHz channels and uncongested bandwidth in the 6 GHz band to deliver unprecedented multi-gigabit and low latency connectivity," said Kevin Robinson, SVP of Marketing at Wi-Fi Alliance.
Aruba announced the availability of an embedded solution for mobile devices that delivers real-time visibility into roaming user experiences and application performance. Developed with Zebra Technologies, an innovator at the front line of business with solutions and partners that deliver a performance edge, the Aruba User Experience Insight AI software agent embedded in Zebra mobile computers analyzes real-time voice and data traffic and proactively flags issues that could affect application, Wi-Fi connectivity, roaming, and voice performance.
Aruba, a Hewlett Packard Enterprise company announced an expansive set of cross-portfolio edge-to-cloud security integrations for Aruba ESP. The new advancements include the integration of the ClearPass Policy Manager secure network access control platform with the Aruba EdgeConnect SD-WAN edge platform, formerly Silver Peak, the integration of Aruba Threat Defense with the EdgeConnect platform, and the expansion of the Aruba ESP multivendor security partner ecosystem, providing enterprise customers with the freedom to deploy, cloud-delivered secure access service edge security components of their choice. Since IoT devices are agentless, IT departments cannot install security clients or redirect device traffic to cloud security services; therefore, zero trust security must be applied at the WAN edge.
Aruba, a Hewlett Packard Enterprise company in collaboration with Microsoft, announced two new solutions that enable organizations to accelerate their digital transformation from edge-to-cloud by delivering deeper integration between Aruba ESP and Microsoft Azure. Announced at Microsoft Ignite 2021, the first solution is Aruba IoT Transport for Azure, a service that enables IoT devices connected to Aruba access points and controllers to bi-directionally communicate with the Azure IoT Hub.
Aruba, a Hewlett Packard Enterprise company, introduced Aruba ESP, the industry's first AI-powered, cloud-native platform that predicts and resolves problems at the network edge before they happen. Aruba ESP is designed to deliver a cloud experience at the edge and can be consumed either as a service in the cloud or on-premises, as a managed service delivered through Aruba partners, or via network as a service through HPE GreenLake.
"Throughout the pandemic, Aruba's AI-powered infrastructure has adapted to optimize customers' reimagined work environments at half a million customer sites worldwide, with massive teleworkforces dispatched to work from home, and for essential mobile workforces." Through Aruba-led innovations or implemented in concert with Aruba Technology Partners, these solutions use IoT and Bluetooth radios already built into Aruba access points and managed from a single pane of glass.