A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
| Aruba Aos 8 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub