Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade Mobility Controllers and Gateways to one of the following
ArubaOS versions (as applicable) to resolve all the vulnerabilities
described in the details section:
- ArubaOS 6.5.4.x: 6.5.4.23 and above
- ArubaOS 8.6.x: 8.6.0.18 and above
- ArubaOS 8.7.x: 8.7.1.10 and above
- ArubaOS 8.10.x: 8.10.0.0 and above
- ArubaOS 10.3.x: 10.3.0.1 and above
- SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above
Aruba does not evaluate or patch ArubaOS branches
that have reached their End of Support (EoS) milestone. For
more information about Aruba's End of Support policy visit:
https://www.arubanetworks.com/support-services/end-of-life/ | Jan 14, 2025 | Oct 25, 2022 |
| Aruba Aos 8 | — | Upgrade Mobility Controllers and Gateways to one of the following
ArubaOS versions (as applicable) to resolve all the vulnerabilities
described in the details section:
- ArubaOS 6.5.4.x: 6.5.4.23 and above
- ArubaOS 8.6.x: 8.6.0.18 and above
- ArubaOS 8.7.x: 8.7.1.10 and above
- ArubaOS 8.10.x: 8.10.0.0 and above
- ArubaOS 10.3.x: 10.3.0.1 and above
- SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above
Aruba does not evaluate or patch ArubaOS branches
that have reached their End of Support (EoS) milestone. For
more information about Aruba's End of Support policy visit:
https://www.arubanetworks.com/support-services/end-of-life/ | Jan 14, 2025 | Oct 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub