Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade Mobility Conductors, Controllers, and Gateways
to one of the following AOS-10 or AOS-8 versions (as applicable)
to resolve the vulnerability described in the details section:
- AOS-10.7.x.x: 10.7.1.1 and above
- AOS-10.4.x.x: 10.4.1.7 and above
- AOS-8.12.x.x: 8.12.0.4 and above
- AOS-8.10.x.x: 8.10.0.16 and above
Software versions with resolution/fixes for the vulnerabilities
covered above can be downloaded from the HPE Networking
Support Portal at
https://networkingsupport.hpe.com/downloads;fileTypes=SOFTWARE
HPE Aruba Networking does not evaluate or patch AOS-10 GW and
AOS-8 Controller/Mobility Conductor software branches that have reached
their End of Maintenance (EoM) milestone. For more information about
HPE Aruba Networking's End of Life policy
visit: https://www.hpe.com/psnow/doc/a00143052enw | Apr 10, 2025 | Apr 8, 2025 |
| Aruba Aos 8 | — | Upgrade Mobility Conductors, Controllers, and Gateways
to one of the following AOS-10 or AOS-8 versions (as applicable)
to resolve the vulnerability described in the details section:
- AOS-10.7.x.x: 10.7.1.1 and above
- AOS-10.4.x.x: 10.4.1.7 and above
- AOS-8.12.x.x: 8.12.0.4 and above
- AOS-8.10.x.x: 8.10.0.16 and above
Software versions with resolution/fixes for the vulnerabilities
covered above can be downloaded from the HPE Networking
Support Portal at
https://networkingsupport.hpe.com/downloads;fileTypes=SOFTWARE
HPE Aruba Networking does not evaluate or patch AOS-10 GW and
AOS-8 Controller/Mobility Conductor software branches that have reached
their End of Maintenance (EoM) milestone. For more information about
HPE Aruba Networking's End of Life policy
visit: https://www.hpe.com/psnow/doc/a00143052enw | Apr 22, 2025 | Apr 8, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub