Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise_(hpe):aruba_os:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e)
ProductAruba Os (fdfb2756-1238-55e4-aae5-1289e4c53883)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42507 vulnerable 2026-06-08 06:45:46.652498 Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
CRITICAL (9.8)
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2024-09-24T18:11:37.946Z
Updated: 2024-09-26T03:55:51.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42506 vulnerable 2026-06-08 06:45:46.652113 Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
CRITICAL (9.8)
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2024-09-24T18:10:30.812Z
Updated: 2024-09-26T03:55:50.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42505 vulnerable 2026-06-08 06:45:46.651606 Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
CRITICAL (9.8)
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2024-09-24T18:09:27.417Z
Updated: 2024-09-26T03:55:49.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42503 vulnerable 2026-06-08 06:45:46.649268 Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)
HIGH (7.2)
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.
Published: 2024-09-17T17:16:10.361Z
Updated: 2024-09-18T14:35:00.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42502 vulnerable 2026-06-08 06:45:46.637110 Authenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface
HIGH (7.2)
Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.
Published: 2024-09-17T17:14:54.458Z
Updated: 2024-09-18T14:38:16.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42501 vulnerable 2026-06-08 06:45:46.636504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.