3 advisories tracked · HPE Aruba Networking Security Advisories (PSIRT) via NVD · checked automatically every minute
Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Aruba's recent advisories.
HPE Aruba Networking Security Advisories (PSIRT) via NVD
Aruba's PSIRT bulletin portal (arubanetworks.com) is a JavaScript app with no stable public feed, so VulniPulse ingests Aruba's CVEs from NVD. Aruba publishes under the shared HPE CNA (security-alert@hpe.com), which also covers non-networking HPE products — so this feed is filtered to Aruba networking products only (ClearPass, ArubaOS / AOS-8 / AOS-10 controllers & gateways, AOS-CX and ArubaOS-Switch, Instant APs, Aruba Central, Fabric Composer and EdgeConnect/Silver Peak SD-WAN). Each entry links back to the official Aruba/HPE advisory when NVD carries the reference.
Visit HPE Aruba Networking security advisoriesA vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute unauthorized commands.
A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior.