AA
Product
Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 10Medium 1Low 0
Watch
Add Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45619 | 8.2 | Nov 14 | There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol) Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45618 | 8.2 | Nov 14 | There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol) Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45617 | 8.2 | Nov 14 | There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol) Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45624 | 7.5 | Nov 14 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45623 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45622 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45621 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45620 | 7.5 | Nov 14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45626 | 7.2 | Nov 14 | An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
| CVE-2023-45625 | 7.2 | Nov 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: ArubaOS 10.5.x.x: 10.5.0.0 and below; ArubaOS 10.4.x.x: 10.4.0.2 and below; InstantOS 8.11.x.x: 8.11.1.2 and below; InstantOS 8.10.x.x: 8.10.0.8 and below; InstantOS 8.6.x.x: 8.6.0.22 and below |
Showing 10