Vulnerabilities > Arubanetworks

DATE CVE VULNERABILITY TITLE RISK
2020-11-04 CVE-2020-7128 Missing Authentication for Critical Function vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks CWE-306
critical
9.8
2020-10-26 CVE-2020-7127 Unspecified vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks
critical
9.8
2020-10-26 CVE-2020-7126 Server-Side Request Forgery (SSRF) vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks CWE-918
5.8
2020-10-26 CVE-2020-7125 Improper Privilege Management vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks CWE-269
8.8
2020-10-26 CVE-2020-7124 Unspecified vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks
critical
9.8
2020-10-26 CVE-2020-24632 Unspecified vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks
7.2
2020-10-26 CVE-2020-24631 Unspecified vulnerability in Arubanetworks Airwave Glass 1.2.1/1.3.0/1.3.1
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
network
low complexity
arubanetworks
7.2
2020-09-23 CVE-2020-7122 Out-of-bounds Write vulnerability in Arubanetworks products
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found.
network
low complexity
arubanetworks CWE-787
7.5
2020-09-23 CVE-2020-7121 Out-of-bounds Write vulnerability in Arubanetworks products
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found.
network
low complexity
arubanetworks CWE-787
7.5
2020-09-04 CVE-2020-7119 Unspecified vulnerability in Arubanetworks Analytics and Location Engine
A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user.
network
low complexity
arubanetworks
4.9