Aruba Networks MCR-HW-1K

There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.

Published: 2023-07-05T14:50:10.736Z
Updated: 2024-12-04T15:36:27.642Z

A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Published: 2023-07-05T14:49:00.807Z
Updated: 2024-10-21T21:11:25.552Z

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.

Published: 2023-07-05T14:47:46.596Z
Updated: 2024-12-04T15:38:20.007Z

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.

Published: 2023-07-05T14:47:43.236Z
Updated: 2024-12-04T15:39:11.162Z

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.

Published: 2023-07-05T14:46:49.679Z
Updated: 2024-12-04T15:39:41.143Z