AI
Product
AOS-8 Instant and AOS-10 AP
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 9Medium 1Low 0
Watch
Add AOS-8 Instant and AOS-10 AP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-31473 | 9.8 | May 14 | There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31472 | 9.8 | May 14 | There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31471 | 9.8 | May 14 | There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31470 | 9.8 | May 14 | There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending… Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31469 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31468 | 9.8 | May 14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31467 | 9.8 | May 14 | Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31466 | 9.8 | May 14 | Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31477 | 8.8 | May 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31476 | 8.8 | May 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31475 | 8.2 | May 14 | There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol) Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31474 | 8.2 | May 14 | There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol) Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31482 | 7.5 | May 14 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31481 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31480 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31479 | 7.5 | May 14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31478 | 7.5 | May 14 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
| CVE-2024-31483 | 6.5 | May 14 | An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol Affected: 10.5.0.0 through 10.5.1.0; 10.4.0.0 through 10.4.1.0; 8.11.0.0 through 8.11.2.1; 8.10.0.0 through 8.10.0.10; 8.6.0.0 through 8.6.0.23 |
Showing 18