Arubanetworks Aruba Mobility Controller vulnerabilities

2 vulnerabilities

Known vulnerabilities in Arubanetworks Aruba Mobility Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2008-7023arubanetworksaruba_mobility_controller+1
EPSS score
1.81%
Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.7.8CVE-2008-5563aruba_networksaruba_mobility_controller+2
EPSS score
2.15%
Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame.