Hpe Aruba Networking Wireless Operating System (Aos 10 & Aos 8)
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_wireless_operating_system_(aos-10_&_aos-8):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Hpe Aruba Networking Wireless Operating System (Aos 10 & Aos 8) (30a9f529-34ee-5059-b7ca-262aa7544d5d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23809 |
vulnerable | 2026-06-08 07:51:16.274833 |
MAC Address Spoofing leads to Inter-BSSID Isolation Bypass Resulting in Traffic Redirection
MEDIUM (5.4)
A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolation controls. Successful exploitation may enable an attacker to redirect and intercept the victim's network traffic, potentially resulting in eavesdropping, session hijacking, or denial of service.
Published: 2026-03-04T16:10:02.829Z
Updated: 2026-04-01T16:22:10.710Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23808 |
vulnerable | 2026-06-08 07:51:16.273119 |
Client Isolation Bypass via GTK Manipulation
MEDIUM (5.4)
A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality.
Published: 2026-03-04T16:09:17.967Z
Updated: 2026-04-01T16:22:33.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23601 |
vulnerable | 2026-06-08 07:51:15.635899 |
Frame Injection via Shared GTK Allows Traffic Spoofing and Client Compromise
MEDIUM (5.4)
A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.
Published: 2026-03-04T16:07:42.929Z
Updated: 2026-04-01T16:23:06.986Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.