Aruba Products Multiple Vulnerabilities

Release Date: 1 Mar 2023 4999 Views

RISK: High Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Aruba Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, sensitive information disclosure, cross-site scripting and security restriction bypass on the targeted system.

Impact

Remote Code Execution
Security Restriction Bypass
Information Disclosure
Cross-Site Scripting

System / Technologies affected

Aruba Mobility Conductor (formerly Mobility Master)
Aruba Mobility Controllers
WLAN Gateways and SD-WAN Gateways managed by Aruba Central

Affected Software Versions

ArubaOS 8.6.0.19 and below
ArubaOS 8.10.0.4 and below
ArubaOS 10.3.1.0 and below
SD-WAN 8.7.0.0-2.3.0.8 and below

The following ArubaOS and SD-WAN software versions that are End of Life are affected by these vulnerabilities and are not patched by this advisory