Vulnerabilities > Arubanetworks > Arubaos > 10.3.1.0

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-45624 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol.
network
low complexity
arubanetworks hp
7.5
7.5
2023-11-14 CVE-2023-45625 Command Injection vulnerability in multiple products
Multiple authenticated command injection vulnerabilities exist in the command line interface.
network
low complexity
arubanetworks hp CWE-77
7.2
7.2
2023-11-14 CVE-2023-45626 An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles.
network
low complexity
arubanetworks hp
7.2
7.2
2023-11-14 CVE-2023-45627 An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service.
network
low complexity
arubanetworks hp
6.5
6.5
2023-05-08 CVE-2023-22787 An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10.
network
low complexity
arubanetworks hp
7.5
7.5
2023-05-08 CVE-2023-22788 Command Injection vulnerability in multiple products
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface.
network
low complexity
arubanetworks hp CWE-77
8.8
8.8
2023-05-08 CVE-2023-22789 Command Injection vulnerability in multiple products
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface.
network
low complexity
arubanetworks hp CWE-77
8.8
8.8
2023-05-08 CVE-2023-22790 Command Injection vulnerability in multiple products
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface.
network
low complexity
arubanetworks hp CWE-77
8.8
8.8
2023-05-08 CVE-2023-22791 A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN.
high complexity
arubanetworks hp
4.8
4.8
2023-03-01 CVE-2023-22747 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211).
network
low complexity
arubanetworks CWE-77
critical
 9.8
9.8