Aruba Networks Arubanetworks 9004-LTE

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.

Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.

Client Isolation Bypass via GTK Manipulation

Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways

Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways

Hardware Root of Trust Bypass in 9200 and 9000 Series Controllers and Gateways

MAC Address Spoofing leads to Inter-BSSID Isolation Bypass Resulting in Traffic Redirection

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.

Insufficient Session Expiration in ArubaOS Command Line Interface

Frame Injection via Shared GTK Allows Traffic Spoofing and Client Compromise

Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read

Cross-BSSID GTK Re-encryption and Traffic Injection

Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation

Security Boundary Bypass via Routing Node Impersonation