CVE Intelligence

Vulnerabilidades do Arubanetworks Sd-wan

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Arubanetworks Sd-wan: 42 registro(s), com versões afetadas e correções.
cpe:2.3:a:arubanetworks:sd-wan

CVE-2026-23824 Alta · 7.5 CWE-400 12/05/2026
Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.
CVE-2022-37912 Alta · 8.8 CWE-78 12/12/2022
OS Command Injection em Arubanetworks Sd-wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37911 Média · 5.5 CWE-611 12/12/2022
XML External Entity (XXE) em Arubanetworks Sd-wan
Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition.
CVE-2022-37910 Média · 6.5 CWE-120 12/12/2022
Classic Buffer Overflow em Arubanetworks Sd-wan
A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in a denial of service on the affected system.
CVE-2022-37909 Média · 5.3 CWE-200 12/12/2022
Exposure of Sensitive Information em Arubanetworks Sd-wan
Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
CVE-2022-37908 Média · 6.5 CWE-494 12/12/2022
Download of Code Without Integrity Check em Arubanetworks Sd-wan
An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.
CVE-2022-37907 Alta · 7.5 CWE-400 12/12/2022
Uncontrolled Resource Consumption em Arubanetworks Sd-wan
A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system. A successful attacker can cause a system hang which can only be resolved via a power cycle of the impacted controller.
CVE-2022-37906 Alta · 8.1 CWE-22 12/12/2022
Path Traversal em Arubanetworks Sd-wan
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system.
CVE-2022-37905 Alta · 8.8 CWE-1236 12/12/2022
CSV Injection em Arubanetworks Sd-wan
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system.
CVE-2022-37904 Alta · 8.8 CWE-123 12/12/2022
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an…
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system.
CVE-2022-37903 Alta · 8.8 CWE-787 12/12/2022
Out-of-bounds Write em Arubanetworks Sd-wan
A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.
CVE-2022-37902 Alta · 7.2 CWE-78 12/12/2022
OS Command Injection em Arubanetworks Sd-wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37901 Alta · 7.2 CWE-78 12/12/2022
OS Command Injection em Arubanetworks Sd-wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37900 Alta · 7.2 CWE-78 12/12/2022
OS Command Injection em Arubanetworks Sd-wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37899 Alta · 7.2 CWE-78 12/12/2022
OS Command Injection em Arubanetworks Sd-wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37898 Alta · 7.2 CWE-78 12/12/2022
OS Command Injection em Arubanetworks Sd-wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37897 Crítica · 9.8 CWE-78 12/12/2022
OS Command Injection em Arubanetworks Sd-wan
There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.