A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware on affected Access Points.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
| Aruba Aos 8 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub