Aruba Access Points Running Instantos And Arubaos 10

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise_(hpe):aruba_access_points_running_instantos_and_arubaos_10:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e)
ProductAruba Access Points Running Instantos And Arubaos 10 (6db9bb89-ed71-5584-b83f-17dd699e9ba2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35982 vulnerable 2026-06-08 06:06:28.252840 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CRITICAL (9.8)
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2023-07-25T18:28:20.312Z
Updated: 2024-11-07T18:11:05.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35981 vulnerable 2026-06-08 06:06:28.252198 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CRITICAL (9.8)
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2023-07-25T18:28:14.271Z
Updated: 2024-11-07T18:51:06.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35980 vulnerable 2026-06-08 06:06:28.250649 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CRITICAL (9.8)
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2023-07-25T18:28:10.354Z
Updated: 2024-11-07T18:56:09.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22791 vulnerable 2026-06-08 05:54:27.083524 Aruba InstantOS and ArubaOS 10 Sensitive Information Disclosure
MEDIUM (5.4)
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in which this disclosure of potentially sensitive information can occur are complex and depend on factors that are beyond the control of the attacker.
Published: 2023-05-08T14:10:03.684Z
Updated: 2025-01-31T18:01:49.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22790 vulnerable 2026-06-08 05:54:27.083096 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface
HIGH (7.2)
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Published: 2023-05-08T14:08:43.190Z
Updated: 2025-01-31T18:03:17.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22789 vulnerable 2026-06-08 05:54:27.082695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22788 vulnerable 2026-06-08 05:54:27.082277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22787 vulnerable 2026-06-08 05:54:27.081842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22786 vulnerable 2026-06-08 05:54:27.081412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22785 vulnerable 2026-06-08 05:54:27.081006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22784 vulnerable 2026-06-08 05:54:27.080586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22783 vulnerable 2026-06-08 05:54:27.080150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22782 vulnerable 2026-06-08 05:54:27.079721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22781 vulnerable 2026-06-08 05:54:27.079293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22780 vulnerable 2026-06-08 05:54:27.078818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22779 vulnerable 2026-06-08 05:54:27.071822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.