Show filters
40 Total Results
Displaying 1-10 of 40
Sort by:
Attacker Value
Unknown
CVE-2024-47464
Disclosure Date: November 05, 2024 (last updated November 06, 2024)
An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote unauthorized access to files.
0
Attacker Value
Unknown
CVE-2024-47463
Disclosure Date: November 05, 2024 (last updated November 06, 2024)
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution (RCE) on the underlying operating system.
0
Attacker Value
Unknown
CVE-2024-47462
Disclosure Date: November 05, 2024 (last updated November 06, 2024)
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution (RCE) on the underlying operating system.
0
Attacker Value
Unknown
CVE-2024-47461
Disclosure Date: November 05, 2024 (last updated November 06, 2024)
An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying host operating system.
0
Attacker Value
Unknown
CVE-2024-47460
Disclosure Date: November 05, 2024 (last updated November 06, 2024)
Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
0
Attacker Value
Unknown
CVE-2024-42509
Disclosure Date: November 05, 2024 (last updated November 06, 2024)
Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
0
Attacker Value
Unknown
CVE-2024-31483
Disclosure Date: May 14, 2024 (last updated May 15, 2024)
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.
0
Attacker Value
Unknown
CVE-2024-31482
Disclosure Date: May 14, 2024 (last updated May 15, 2024)
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.
0
Attacker Value
Unknown
CVE-2024-31481
Disclosure Date: May 14, 2024 (last updated May 15, 2024)
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
0
Attacker Value
Unknown
CVE-2024-31480
Disclosure Date: May 14, 2024 (last updated May 15, 2024)
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
0