DeutschShown in its original language — a full translation is planned for a future version.
Aruba ArubaOS: Mehrere Schwachstellen
view advisory published 2024-05-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um eine Denial-of-Service-Zustand zu erzeugen und um vertrauliche Informationen offenzulegen.
01
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-31483US | medium6.5 | — | ||
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in t… | ||||
| CVE-2024-31482US | high7.5 | — | ||
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability result… | ||||
| CVE-2024-31481US | high7.5 | — | ||
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the abil… | ||||
| CVE-2024-31480US | high7.5 | — | ||
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the abil… | ||||
| CVE-2024-31479US | high7.5 | — | ||
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities… | ||||
| CVE-2024-31478US | high7.5 | — | ||
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result… | ||||
| CVE-2024-31477US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbi… | ||||
| CVE-2024-31476US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbi… | ||||
| CVE-2024-31475US | high8.2 | — | ||
There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this… | ||||
| CVE-2024-31474US | high8.2 | — | ||
There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability resu… | ||||
| CVE-2024-31473US | critical9.8 | — | ||
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets… | ||||
| CVE-2024-31472US | critical9.8 | — | ||
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets d… | ||||
| CVE-2024-31471US | critical9.8 | — | ||
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted pa… | ||||
| CVE-2024-31470US | critical9.8 | — | ||
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending s… | ||||
| CVE-2024-31469US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted pac… | ||||
| CVE-2024-31468US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted pac… | ||||
| CVE-2024-31467US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to th… | ||||
| CVE-2024-31466US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to th… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan