HPE patches 72 Aruba AOS flaws, eight at maximum severity
Unauthenticated attackers could gain remote code execution or admin access; HPE reports no known exploitation.
Stories per day · 30 days
Relatedauthentication-bypass3hpe3aos2aos-101aos-81buffer-overflow1command-injection1papi1remote-code-execution1
6 stories, newest first · one card per story
Stories tagged #aruba
HPE patches critical Aruba AOS flaws that can fully control devices
Eight CVEs score CVSS 10.0; unauthenticated AOS-8 flaws can run commands as root, and HPE knew of no public exploit code.
HPE patches Aruba AOS-8 SSH authentication bypass and dozens of other flaws
Bulletin HPESBNW05162 covers 72 AOS-8 and AOS-10 flaws, several scored CVSS 10.0 for unauthenticated remote code execution.
HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access
HPE patched ten Analytics Engine flaws, including unauthenticated bugs that can give attackers root.
HPE security advisory (AV26-909)
Canada's Cyber Centre relayed HPE advisories covering vulnerabilities in Aruba ClearPass Policy Manager and HPE IceWall products.
HPE security advisory (AV26-873)
Canada's Cyber Centre relays HPE advisories covering multiple vulnerabilities in Aruba AOS-CX switches and Fabric Composer, urging updates.