AM
Product
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 22Medium 13Low 1
Watch
Add Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33512 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-33511 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-26305 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2024-26304 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: ArubaOS 10.5.x.x: 10.5.1.0 and below; ArubaOS 10.4.x.x: 10.4.1.0 and below; ArubaOS 8.11.x.x: 8.11.2.1 and below; ArubaOS 8.10.x.x: 8.10.0.10 and below |
| CVE-2023-22757 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22756 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22755 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22754 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22753 | 9.8 | Feb 28 | Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes Affected: ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22752 | 9.8 | Feb 28 | Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22751 | 9.8 | Feb 28 | Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22750 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22749 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22748 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
| CVE-2023-22747 | 9.8 | Feb 28 | Multiple Unauthenticated Command Injections in the PAPI Protocol Affected: ArubaOS 8.6.x.x: 8.6.0.19 and below; ArubaOS 8.10.x.x: 8.10.0.4 and below; ArubaOS 10.3.x.x: 10.3.1.0 and below; SD-WAN 8.7.0.0-2.3.0.x: 8.7.0.0-2.3.0.8 and below |
Showing 15