Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und um einen Denial-of-Service-Zustand zu erzeugen
Product
ArubaOS ist das Betriebssystem der Aruba Netzwerkprodukte.
Vulnerabilities 10
-
Critical 9.8
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated …
-
Critical 9.8CVE-2024-26305 EPSS 15%
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote cod…
-
Critical 9.8CVE-2024-33511 EPSS 15%
There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticat…
-
Critical 9.8CVE-2024-33512 EPSS 15%
There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead t…
-
Medium 5.9
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protoc…
-
Medium 5.3
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protoc…
-
Medium 5.3
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protoc…
-
Medium 5.3
An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol prov…
-
Medium 5.3
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the…
-
Medium 5.3
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the…
Revision history
-
#1
Initiale Fassung
References
-
HPE Aruba Networking Product Security Advisory vom 2024-05-01
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
-
HPE Security Advisory vom 2024-05-01
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04640en_us&docLocale=en_US