Arubanetworks Arubaos vulnerabilities

CVE-2024-31468 [CRITICAL] CWE-121 CVE-2024-31468: There are buffer overflow vulnerabilities in the underlying Central Communications service that coul There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute a

CVE-2018-7081 [CRITICAL] CWE-20 CVE-2018-7081: A remote code execution vulnerability is present in network-listening components in some versions of A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code within the underlying operating system with full system pri

CVE-2022-37889 [CRITICAL] CWE-120 CVE-2022-37889: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a

CVE-2022-37887 [CRITICAL] CWE-120 CVE-2022-37887: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a

CVE-2022-37888 [CRITICAL] CWE-120 CVE-2022-37888: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a

CVE-2022-37886 [CRITICAL] CWE-120 CVE-2022-37886: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a

CVE-2022-37885 [CRITICAL] CWE-120 CVE-2022-37885: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a

CVE-2024-42393 [CRITICAL] CWE-787 CVE-2024-42393: There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVE-2024-42394 [CRITICAL] CWE-787 CVE-2024-42394: There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVE-2023-22751 [CRITICAL] CWE-787 CVE-2023-22751: There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged

CVE-2023-22752 [CRITICAL] CWE-787 CVE-2023-22752: There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged

CVE-2023-22757 [CRITICAL] CWE-120 CVE-2023-22757: There are buffer overflow vulnerabilities in multiple underlying operating system processes that cou There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying oper

CVE-2023-22756 [CRITICAL] CWE-120 CVE-2023-22756: There are buffer overflow vulnerabilities in multiple underlying operating system processes that cou There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying oper

CVE-2023-22754 [CRITICAL] CWE-120 CVE-2023-22754: There are buffer overflow vulnerabilities in multiple underlying operating system processes that cou There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying oper

CVE-2023-22753 [CRITICAL] CWE-120 CVE-2023-22753: There are buffer overflow vulnerabilities in multiple underlying operating system processes that cou There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying oper

CVE-2023-22755 [CRITICAL] CWE-120 CVE-2023-22755: There are buffer overflow vulnerabilities in multiple underlying operating system processes that cou There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying oper

CVE-2024-42395 [CRITICAL] CWE-787 CVE-2024-42395: There is a vulnerability in the AP Certificate Management Service which could allow a threat actor t There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVE-2026-44869 [HIGH] CWE-77 CVE-2026-44869: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Op Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

CVE-2026-44868 [HIGH] CWE-77 CVE-2026-44868: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Op Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

CVE-2026-44867 [HIGH] CWE-77 CVE-2026-44867: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Op Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.