Vulnerabilities > Arubanetworks > Arubaos > 8.6.0.11

DATE CVE VULNERABILITY TITLE RISK
2023-03-01 CVE-2023-22755 Classic Buffer Overflow vulnerability in Arubanetworks Arubaos and Sd-Wan
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
network
low complexity
arubanetworks CWE-120
critical
9.8
2023-03-01 CVE-2023-22756 Classic Buffer Overflow vulnerability in Arubanetworks Arubaos and Sd-Wan
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
network
low complexity
arubanetworks CWE-120
critical
9.8
2023-03-01 CVE-2023-22757 Classic Buffer Overflow vulnerability in Arubanetworks Arubaos and Sd-Wan
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
network
low complexity
arubanetworks CWE-120
critical
9.8
2023-03-01 CVE-2023-22758 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22759 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22760 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22761 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22762 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22763 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22764 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
network
low complexity
arubanetworks CWE-77
7.2