Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade Mobility Conductors, Mobility Controllers and Gateways to one of the following AOS versions (as applicable) to resolve all the vulnerabilities described in the details section:
- AOS-10.7.x.x: 10.7.0.0 and above
- AOS-10.6.x.x: 10.6.0.3 and above
- AOS-8.12.x.x: 8.12.0.2 and above
- AOS-8.10.x.x: 8.10.0.14 and above
Note: AOS-10.4.x.x is not affected by any of the vulnerabilities above. | Jan 14, 2025 | Sep 17, 2024 |
| Aruba Aos 8 | — | Upgrade Mobility Conductors, Mobility Controllers and Gateways to one of the following AOS versions (as applicable) to resolve all the vulnerabilities described in the details section:
- AOS-10.7.x.x: 10.7.0.0 and above
- AOS-10.6.x.x: 10.6.0.3 and above
- AOS-8.12.x.x: 8.12.0.2 and above
- AOS-8.10.x.x: 8.10.0.14 and above
Note: AOS-10.4.x.x is not affected by any of the vulnerabilities above. | Jan 14, 2025 | Sep 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub