Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

• CVE-2024-33518 Medium 5.3 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the abil 0.5%
• CVE-2024-33517 Medium 5.3 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the abil 0.6%
• CVE-2024-33516 Medium 5.3 An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ab 0.6%
• CVE-2024-33515 Medium 5.3 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to in 0.6%
• CVE-2024-33514 Medium 5.3 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to in 0.6%
• CVE-2024-33513 Medium 5.9 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to in 0.5%
• CVE-2024-33512 Critical 9.8 There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets dest 14.6%
• CVE-2024-33511 Critical 9.8 There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAP 14.6%
• CVE-2024-26305 Critical 9.8 There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's ac 15.2%
• CVE-2024-26304 Critical 9.8 There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI ( 44.3%
• CVE-2023-35979 Medium 5.3 Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface 0.6%
• CVE-2023-35978 Medium 6.1 Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface 0.5%
• CVE-2023-35977 Medium 6.5 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface 0.5%
• CVE-2023-35976 Medium 6.5 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface 0.5%
• CVE-2023-35975 Medium 6.5 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion 0.7%
• CVE-2023-35974 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.4%
• CVE-2023-35973 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.4%
• CVE-2023-35972 High 7.2 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface 1.6%
• CVE-2023-35971 High 8.8 Unauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface 0.6%
• CVE-2023-22778 Medium 4.8 Authenticated Stored Cross-Site Scripting 0.5%
• CVE-2023-22777 Medium 4.9 Authenticated Information Disclosure in ArubaOS Web-based Management Interface 0.6%
• CVE-2023-22776 Medium 4.9 Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read 0.7%
• CVE-2023-22775 Medium 6.5 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface 0.6%
• CVE-2023-22774 High 7.2 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. 0.8%
• CVE-2023-22773 High 7.2 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. 0.8%
• CVE-2023-22772 Medium 6.5 Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion 0.7%
• CVE-2023-22771 Medium 6.8 Insufficient Session Expiration in ArubaOS Command Line Interface 0.4%
• CVE-2023-22770 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22769 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22768 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22767 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22766 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22765 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22764 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22763 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22762 High 7.2 Authenticated Remote Command Execution in the ArubaOS Command Line Interface 1.5%
• CVE-2023-22761 High 7.2 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface 1.6%
• CVE-2023-22760 High 7.2 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface 1.6%
• CVE-2023-22759 High 7.2 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface 1.6%
• CVE-2023-22758 High 7.2 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface 1.6%
• CVE-2023-22757 High 8.1 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes 1.1%
• CVE-2023-22756 High 8.1 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes 1.1%
• CVE-2023-22755 High 8.1 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes 1.1%
• CVE-2023-22754 High 8.1 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes 1.1%
• CVE-2023-22753 High 8.1 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes 1.1%
• CVE-2023-22752 Critical 9.8 Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol 1.3%
• CVE-2023-22751 Critical 9.8 Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol 1.3%
• CVE-2023-22750 Critical 9.8 Multiple Unauthenticated Command Injections in the PAPI Protocol 1.7%
• CVE-2023-22749 Critical 9.8 Multiple Unauthenticated Command Injections in the PAPI Protocol 1.7%
• CVE-2023-22748 Critical 9.8 Multiple Unauthenticated Command Injections in the PAPI Protocol 1.7%