Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_access_points,_instant_aos-8,_and_aos-10:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e)
ProductHpe Aruba Networking Access Points, Instant Aos 8, And Aos 10 (d8d24d18-3001-5612-ac04-231c918b1a5f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47464 vulnerable 2026-06-08 06:48:12.091641 Authenticated Path Traversal Vulnerability Leads to a Remote Unauthorized Access to Files
MEDIUM (6.8)
An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote unauthorized access to files.
Published: 2024-11-05T23:02:58.693Z
Updated: 2024-11-06T15:13:53.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47463 vulnerable 2026-06-08 06:48:12.091358 Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)
HIGH (7.2)
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution (RCE) on the underlying operating system.
Published: 2024-11-05T22:59:04.966Z
Updated: 2024-11-09T04:55:52.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47462 vulnerable 2026-06-08 06:48:12.090974 Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)
HIGH (7.2)
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution (RCE) on the underlying operating system.
Published: 2024-11-05T22:57:44.838Z
Updated: 2024-11-09T04:55:51.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47461 vulnerable 2026-06-08 06:48:12.090486 Authenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10
HIGH (7.2)
An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying host operating system.
Published: 2024-11-05T22:54:12.794Z
Updated: 2024-11-09T04:55:49.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47460 vulnerable 2026-06-08 06:48:12.089810 Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol
CRITICAL (9)
Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2024-11-05T22:46:26.066Z
Updated: 2024-11-09T04:55:48.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42509 vulnerable 2026-06-08 06:45:46.664953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.