Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (Formerly Mobility Master); Aruba Mobility Controllers; Wlan Gateways And Sd-Wan Gateways Managed By Aruba Central
51 CVEs affecting Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (Formerly Mobility Master); Aruba Mobility Controllers; Wlan Gateways And Sd-Wan Gateways Managed By Aruba Central. Latest disclosed: 2024-05-01. Critical: 10, High: 24.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-33512 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution… |
CVE-2024-33511 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending spec… |
CVE-2024-26305 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2024-26304 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending special… |
CVE-2023-22752 | Critical | 9.8 | 2023-03-01 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-22751 | Critical | 9.8 | 2023-03-01 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-22750 | Critical | 9.8 | 2023-03-01 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-22749 | Critical | 9.8 | 2023-03-01 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-22748 | Critical | 9.8 | 2023-03-01 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-22747 | Critical | 9.8 | 2023-03-01 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-35971 | High | 8.8 | 2023-07-05 | A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) att… |
CVE-2023-22757 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22756 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22755 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22754 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22753 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-35974 | High | 7.2 | 2023-07-05 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the abi… |
CVE-2023-35973 | High | 7.2 | 2023-07-05 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the abi… |
CVE-2023-35972 | High | 7.2 | 2023-07-05 | An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability res… |
CVE-2023-22774 | High | 7.2 | 2023-03-01 | Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the abilit… |