Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise_(hpe):arubaos_wi-fi_controllers_and_campus/remote_access_points:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e)
ProductArubaos Wi Fi Controllers And Campus/Remote Access Points (586c771e-9e60-58f6-90d1-254df45a0505)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25616 vulnerable 2026-06-08 06:31:23.561770 Details available
LOW (3.7)
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
Published: 2024-03-05T20:20:35.905Z
Updated: 2024-11-07T17:05:17.507Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25615 vulnerable 2026-06-08 06:31:23.561294 Details available
MEDIUM (5.3)
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.
Published: 2024-03-05T20:19:54.342Z
Updated: 2025-03-27T20:13:45.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25614 vulnerable 2026-06-08 06:31:23.559767 Details available
MEDIUM (5.5)
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the controller.
Published: 2024-03-05T20:19:09.850Z
Updated: 2024-10-29T20:21:27.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25613 vulnerable 2026-06-08 06:31:23.559256 Details available
HIGH (7.2)
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Published: 2024-03-05T20:17:55.396Z
Updated: 2025-12-16T18:13:17.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25612 vulnerable 2026-06-08 06:31:23.557955 Details available
HIGH (7.2)
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Published: 2024-03-05T20:16:59.563Z
Updated: 2024-08-01T23:44:09.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25611 vulnerable 2026-06-08 06:31:23.554468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1356 vulnerable 2026-06-08 06:25:39.898980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.