A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware on affected Access Points.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
| Aruba Aos 8 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub