Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in the affected controller leading to complete system compromise.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade Mobility Controllers and Gateways to one of the
following ArubaOS versions (as applicable) to resolve all the
vulnerabilities described in the details section:
- ArubaOS 10.4.x.x: 10.4.0.2 and above
- ArubaOS 8.11.x.x: 8.11.1.1 and above
- ArubaOS 8.10.x.x: 8.10.0.7 and above
- ArubaOS 8.6.x.x: 8.6.0.22 and above
HPE Aruba Networking does not evaluate or patch ArubaOS branches
that have reached their End of Maintenance (EoM) milestone. For
more information about Aruba's End of Support policy visit:
https://www.arubanetworks.com/support-services/end-of-life/ | Jan 14, 2025 | Sep 6, 2023 |
| Aruba Aos 8 | — | Upgrade Mobility Controllers and Gateways to one of the
following ArubaOS versions (as applicable) to resolve all the
vulnerabilities described in the details section:
- ArubaOS 10.4.x.x: 10.4.0.2 and above
- ArubaOS 8.11.x.x: 8.11.1.1 and above
- ArubaOS 8.10.x.x: 8.10.0.7 and above
- ArubaOS 8.6.x.x: 8.6.0.22 and above
HPE Aruba Networking does not evaluate or patch ArubaOS branches
that have reached their End of Maintenance (EoM) milestone. For
more information about Aruba's End of Support policy visit:
https://www.arubanetworks.com/support-services/end-of-life/ | Jan 14, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub