DeutschShown in its original language — a full translation is planned for a future version.
Aruba ArubaOS: Mehrere Schwachstellen
view advisory published 2025-04-08
Ein entfernter authentisierter Angreifer oder ein lokaler Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben und einen Cross-Site-Scripting-Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-27085US | — | — | ||
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could al… | ||||
| CVE-2025-27084US | medium6.1 | — | ||
A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack… | ||||
| CVE-2025-27083US | — | — | ||
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vuln… | ||||
| CVE-2025-27082US | — | — | ||
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploit… | ||||
| CVE-2025-27079US | — | — | ||
A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execut… | ||||
| CVE-2025-27078US | — | — | ||
A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using t… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan