An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade Mobility Controllers, Mobility Conductors and Gateways to
one of the following ArubaOS versions (as applicable) to resolve
all the vulnerabilities described in the details section:
- ArubaOS 10.4.x.x: 10.4.0.2 and above
- ArubaOS 8.11.x.x: 8.11.1.1 and above
- ArubaOS 8.10.x.x: 8.10.0.7 and above
- ArubaOS 8.6.x.x: 8.6.0.21 and above
Aruba does not evaluate or patch ArubaOS branches that have
reached their End of Support (EoS) milestone. For more
information about Aruba's End of Support policy visit:
https://www.arubanetworks.com/support-services/end-of-life/ | Jan 14, 2025 | Jul 11, 2023 |
| Aruba Aos 8 | — | Upgrade Mobility Controllers, Mobility Conductors and Gateways to
one of the following ArubaOS versions (as applicable) to resolve
all the vulnerabilities described in the details section:
- ArubaOS 10.4.x.x: 10.4.0.2 and above
- ArubaOS 8.11.x.x: 8.11.1.1 and above
- ArubaOS 8.10.x.x: 8.10.0.7 and above
- ArubaOS 8.6.x.x: 8.6.0.21 and above
Aruba does not evaluate or patch ArubaOS branches that have
reached their End of Support (EoS) milestone. For more
information about Aruba's End of Support policy visit:
https://www.arubanetworks.com/support-services/end-of-life/ | Jan 14, 2025 | Jul 11, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub