Description
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | Version 8.12.0.0: 8.12.0.1 and below – ≤ <=8.12.0.1, Version 8.10.0.0: 8.10.0.12 and below – ≤ <=8.10.0.12 | — |
Advisories 1
- NCSC-2024-0325 Kwetsbaarheden verholpen in Aruba Networks ArubaOS en InstantOS NCSC-NL (Netherlands) · Aug 7, 2024