Hewlett Packard Enterprise (Hpe) Aruba OS vulnerabilities

6 vulnerabilities

Known vulnerabilities in Hewlett Packard Enterprise (Hpe) Aruba OS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2024-42501hewlett packard enterprise (hpe)aruba os
EPSS score
1.17%
An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants.7.2CVE-2024-42503hewlett packard enterprise (hpe)aruba os
EPSS score
1.50%
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.9.8CVE-2024-42506hewlett packard enterprise (hpe)aruba os
EPSS score
1.42%
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.9.8CVE-2024-42505hewlett packard enterprise (hpe)aruba os
EPSS score
1.49%
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.7.2CVE-2024-42502hewlett packard enterprise (hpe)aruba os
EPSS score
1.79%
Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.9.8CVE-2024-42507hewlett packard enterprise (hpe)aruba os
EPSS score
1.42%
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.