Aruba Products Multiple Vulnerabilities
Release Date:
11 Jul 2023
4281
Views
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
Multiple vulnerabilities were identified in Aruba Products. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting, data manipulation, security restriction bypass, remote code execution, sensitive information disclosure and denial of service on the targeted system.
Impact
- Remote Code Execution
- Denial of Service
- Information Disclosure
- Cross-Site Scripting
- Data Manipulation
- Security Restriction Bypass
System / Technologies affected
- Aruba Access Points running InstantOS and ArubaOS 10
Affected Software Versions
- ArubaOS 10.4.0.1 and below
- ArubaOS 8.11.1.0 and below
- ArubaOS 8.10.0.6 and below
- ArubaOS 8.6.0.20 and below
The following ArubaOS and SD-WAN software versions that are End of Life are affected by these vulnerabilities and are not patched by this advisory
- ArubaOS 8.9.x.x
- ArubaOS 8.8.x.x
- ArubaOS 8.7.x.x
- ArubaOS 6.5.4.x
- SD-WAN 8.7.0.0-2.3.0.x
- SD-WAN 8.6.0.4-2.2.x.x
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
- CVE-2023-35971
- CVE-2023-35972
- CVE-2023-35973
- CVE-2023-35974
- CVE-2023-35975
- CVE-2023-35976
- CVE-2023-35977
- CVE-2023-35978
- CVE-2023-35979
Source
Related Link
Related Tags
Share with