IN
Product
Instant
62
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 21Medium 19Low 0
Watch
Add Instant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42509 | 9.8 | Nov 5 | Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol Affected: 8.12.0.0 through 8.12.0.2; 8.10.0.0 through 8.10.0.13; 6.4.0.0 before 6.6.0.0; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.0 |
| CVE-2024-42393 | 9.8 | Aug 6 | Unauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the Soft AP Daemon Service Accessed by the PAPI Protocol Affected: 8.10.0.0 through 8.10.0.12; 8.12.0.0 through 8.12.0.1 |
| CVE-2024-42395 | 9.8 | Aug 6 | Unauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the AP Certificate Management Service Accessed by the PAPI Protocol Affected: 8.12.0.0 before 8.12.0.2; 8.10.0.0 before 8.10.0.13 |
| CVE-2024-31473 | 9.8 | May 14 | There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31472 | 9.8 | May 14 | There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31471 | 9.8 | May 14 | There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31470 | 9.8 | May 14 | There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending… Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31469 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31468 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31467 | 9.8 | May 14 | Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31466 | 9.8 | May 14 | Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2022-37889 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2022-37891 | 9.8 | Oct 7 | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2022-37890 | 9.8 | Oct 7 | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2022-37885 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2022-37886 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2022-37887 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2022-37888 | 9.8 | Oct 6 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2019-5319 | 9.8 | Mar 30 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.17; 6.5.0.0 before 6.5.4.17; 8.3.0.0 before 8.3.0.13; 8.5.0.0 before 8.5.0.7; 8.6.0.0 before 8.6.0.3 |
| CVE-2021-25149 | 9.8 | Mar 30 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.17; 8.3.0.0 before 8.3.0.13; 8.5.0.0 before 8.5.0.7; 8.6.0.0 before 8.6.0.3 |
| CVE-2020-24636 | 9.8 | Mar 29 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: 6.5.0.0 before 6.5.4.18; 8.3.0.0 before 8.3.0.14; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.6; 8.7.0.0 before 8.7.1.0 |
| CVE-2024-47460 | 9.0 | Nov 5 | Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol Affected: 8.12.0.0 through 8.12.0.2; 8.10.0.0 through 8.10.0.13; 6.4.0.0 before 6.6.0.0; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.0 |
| CVE-2024-31477 | 8.8 | May 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31476 | 8.8 | May 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2021-25150 | 8.8 | Mar 30 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: 6.5.0.0 before 6.5.4.18; 8.3.0.0 before 8.3.0.14; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.5 |
| CVE-2021-25144 | 8.8 | Mar 29 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.17; 8.3.0.0 before 8.3.0.13; 8.5.0.0 before 8.5.0.7; 8.6.0.0 before 8.6.0.3 |
| CVE-2024-31475 | 8.2 | May 14 | There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol) Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31474 | 8.2 | May 14 | There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol) Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2021-25162 | 8.1 | Mar 30 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.8; 8.7.0.0 before 8.7.1.2 |
| CVE-2021-25148 | 8.1 | Mar 30 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba… Affected: 6.5.0.0 before 6.5.4.18; 8.3.0.0 before 8.3.0.14; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.5 |
| CVE-2022-37893 | 7.8 | Oct 7 | An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2024-31482 | 7.5 | May 14 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31481 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31480 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31479 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2024-31478 | 7.5 | May 14 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2021-25143 | 7.5 | Mar 29 | A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba… Affected: 8.3.0.0 before 8.3.0.13; 8.5.0.0 before 8.5.0.10; 8.6.0.0 before 8.6.0.5 |
| CVE-2018-16417 | 7.5 | Oct 30 | Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection Affected: 4.0.0.0 before 4.2.4.12; 6.5.0.0 before 6.5.4.11; 8.3.0.0 before 8.3.0.6; 8.4.0.0 before 8.4.0.1 |
| CVE-2024-47463 | 7.2 | Nov 5 | Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE) Affected: 8.12.0.0 through 8.12.0.2; 8.10.0.0 through 8.10.0.13; 6.4.0.0 before 6.6.0.0; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.0 |
| CVE-2024-47462 | 7.2 | Nov 5 | Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE) Affected: 8.12.0.0 through 8.12.0.2; 8.10.0.0 through 8.10.0.13; 6.4.0.0 before 6.6.0.0; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.0 |
| CVE-2024-47461 | 7.2 | Nov 5 | Authenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10 Affected: 8.12.0.0 through 8.12.0.2; 8.10.0.0 through 8.10.0.13; 6.4.0.0 before 6.6.0.0; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.0 |
| CVE-2021-25146 | 7.2 | Mar 30 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: 6.5.0.0 before 6.5.4.18; 8.3.0.0 before 8.3.0.14; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.6; 8.7.0.0 before 8.7.1.0 |
| CVE-2020-24635 | 7.2 | Mar 29 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: 6.5.0.0 before 6.5.4.18; 8.3.0.0 before 8.3.0.14; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.6; 8.7.0.0 before 8.7.1.0 |
| CVE-2019-5317 | 6.8 | Mar 29 | A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.16; 8.3.0.0 before 8.3.0.12; 8.4.0.0 before 8.4.0.6; 8.5.0.0 before 8.5.0.7; 8.6.0.0 before 8.6.0.3 |
| CVE-2024-31483 | 6.5 | May 14 | An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol Affected: 8.10.0.0 through 8.10.0.10; 8.11.0.0 through 8.11.2.1; 8.6.0.0 through 8.6.0.23; 8.9.0.0 before 8.10.0.0; 8.8.0.0 before 8.9.0.0; 8.5.0.0 before 8.6.0.0; +4 more |
| CVE-2022-37894 | 6.5 | Oct 7 | An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10 Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2021-25159 | 6.5 | Mar 30 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.8; 8.7.0.0 before 8.7.1.2 |
| CVE-2021-25155 | 6.5 | Mar 30 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.7; 8.7.0.0 before 8.7.1.1 |
| CVE-2021-25145 | 6.5 | Mar 30 | A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.6; 8.7.0.0 before 8.7.1.0 |
| CVE-2022-37896 | 6.1 | Oct 7 | A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |