A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to potentially disrupt network services and require manual intervention to restore functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos 10 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
| Aruba Aos 8 | — | Upgrade HPE Aruba Networking AOS-8 Instant APs and AOS-10 APs to one of the following software versions (as applicable) to resolve the vulnerabilities described above in the details sections:
- AOS-10 AP 10.7.x.x: 10.7.2.0 and above
- AOS-10 AP 10.4.x.x: 10.4.1.8 and above
- AOS-8 Instant 8.13.x.x: 8.13.1.0 and above
- AOS-8 Instant 8.12.x.x: 8.12.0.6 and above
- AOS-8 Instant 8.10.x.x: 8.10.0.17 and above | Oct 15, 2025 | Oct 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub