Login Request a demo
AO
Product
Aruba OS
by Hewlett Packard Enterprise (HPE) · last CVE Sep 24, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 3High 3Medium 0Low 0
Severity
All severities6Critical3High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aruba OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-42507
9.8
1%
Sep 24
Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
Affected: Version 10.5.0.0: 10.6.0.2 and below through <=10.6.0.2; Version 10.0.0.0: 10.4.1.13 and below through <=10.4.1.13; Version 6.4.0.0: 8.10.0.13 and below through <=8.10.0.13; Version 8.11.0.0: 8.12.0.1 and below through <=8.12.0.1
CVE-2024-42506
9.8
1%
Sep 24
Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
Affected: Version 10.5.0.0: 10.6.0.2 and below through <=10.6.0.2; Version 10.0.0.0: 10.4.1.13 and below through <=10.4.1.13; Version 6.4.0.0: 8.10.0.13 and below through <=8.10.0.13; Version 8.11.0.0: 8.12.0.1 and below through <=8.12.0.1
CVE-2024-42505
9.8
1%
Sep 24
Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
Affected: Version 10.5.0.0: 10.6.0.2 and below through <=10.6.0.2; Version 10.0.0.0: 10.4.1.13 and below through <=10.4.1.13; Version 6.4.0.0: 8.10.0.13 and below through <=8.10.0.13; Version 8.11.0.0: 8.12.0.1 and below through <=8.12.0.1
CVE-2024-42503
7.2
2%
Sep 17
Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)
Affected: Version 10.6.0.0: 10.6.0.2 and below through <=10.6.0.2; Version 8.10.0.0: 8.10.0.13 and below through <=8.10.0.13; Version 10.5.0.0: 10.6.0.0 and below through <=10.6.0.0; Version 10.3.0.0: 10.4.0.0 and below through <=10.4.0.0; Version 8.11.0.0: 8.12.0.0 and below through <=8.12.0.0; Version 8.12.0.0: 8.12.0.1 and below through <=8.12.0.1; +1 more
CVE-2024-42502
7.2
2%
Sep 17
Authenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface
Affected: Version 10.6.0.0: 10.6.0.2 and below through <=10.6.0.2; Version 8.10.0.0: 8.10.0.13 and below through <=8.10.0.13; Version 10.5.0.0: 10.6.0.0 and below through <=10.6.0.0; Version 10.3.0.0: 10.4.0.0 and below through <=10.4.0.0; Version 8.11.0.0: 8.12.0.0 and below through <=8.12.0.0; Version 8.12.0.0: 8.12.0.1 and below through <=8.12.0.1; +1 more
CVE-2024-42501
7.2
1%
Sep 17
Authenticated Path Traversal Vulnerability Leads to a Remote Command Execution (RCE)
Affected: Version 10.6.0.0: 10.6.0.2 and below through <=10.6.0.2; Version 8.10.0.0: 8.10.0.13 and below through <=8.10.0.13; Version 10.5.0.0: 10.6.0.0 and below through <=10.6.0.0; Version 10.3.0.0: 10.4.0.0 and below through <=10.4.0.0; Version 8.11.0.0: 8.12.0.0 and below through <=8.12.0.0; Version 8.12.0.0: 8.12.0.1 and below through <=8.12.0.1; +1 more
Showing 6