aruba mobility controller vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv2

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote malicious users to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame.

Aruba Networks Aruba Mobility Controller 2.5.4.18 Aruba Networks Aruba Mobility Controller 2.5.6 Arubanetworks Aruba Mobility Controller 3.1.1.0 Aruba Networks Aruba Mobility Controller 2.5.5.7 Aruba Networks Aruba Mobility Controller 2.5.4.25 Aruba Networks Aruba Mobility Controller 2.4.8.6 Aruba Networks Aruba Mobility Controller 2.4.8.5 Arubanetworks Aruba Mobility Controller 3.3.1.6 Arubanetworks Aruba Mobility Controller 3.3.1.0 Aruba Networks Aruba Mobility Controller 2.4.8.11 Aruba Networks Aruba Mobility Controller 3.1.1 Aruba Networks Aruba Mobility Controllers 3.1.1.3 Aruba Networks Aruba Mobility Controller 2.5.2.11 Aruba Networks Aruba Mobility Controller 2.4.8 Aruba Networks Aruba Mobility Controller 2.5.5 Aruba Networks Aruba Mobility Controller 2.5.4.17 Arubanetworks Aruba Mobility Controller 3.2.0.0 Arubanetworks Aruba Mobility Controller 3.1.1.3

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Aruba Networks Aruba Mobility Controller 3.2.0 Aruba Networks Aruba Mobility Controller 3.3.1 Aruba Networks Aruba Mobility Controller 2.4.8 Aruba Networks Aruba Mobility Controller 2.5.5 Aruba Networks Aruba Mobility Controller 2.5.6 Aruba Networks Aruba Mobility Controller 3.1.1

7.5

CVSSv2

The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote malicious users to access administrative interfaces or...

Alcatel-lucent Omniaccess Wireless 43xx Aruba Mobility Controller 800 Alcatel-lucent Omniaccess Wireless 6000 Aruba Mobility Controller 200 Aruba Mobility Controller 2400 Aruba Mobility Controller 6000

7.5

CVSSv2

Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote malicious users to cause a denial of service (process crash) and possibly execute arbitrary co...

Aruba Mobility Controller 2400 Aruba Mobility Controller 6000 Aruba Mobility Controller 800 Alcatel-lucent Omniaccess Wireless 43xx Alcatel-lucent Omniaccess Wireless 6000 Aruba Mobility Controller 200

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and previous versions, and 2.4.8.6-FIPS and previous versions FIPS versions, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Aruba Mobility Controller

6.8

CVSSv2

Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote malicious users to bypass authentication mechanisms and obtain management or VPN interface access.

Aruba Networks Aruba Mobility Controllers Aruba Networks Aruba Mobility Controllers 2.5.2.11 Aruba Networks Aruba Mobility Controllers 2.5.4.25 Aruba Networks Aruba Mobility Controllers 2.5.5.7 Aruba Networks Aruba Mobility Controllers 3.1.1.3 Aruba Networks Aruba Mobility Controllers 2.3.6.15

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and previous versions, and 2.4.8.6-FIPS and previous versions, allows remote malicious users to inject arbitrary web script or HTML via the PATH_IN...

Aruba Networks Mc-800

1 EDB exploit

NA

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none

1 EDB exploit

9

CVSSv2

Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors.

Arubanetworks Arubaos 3.1 Arubanetworks Arubaos 3.2 Arubanetworks Arubaos

6.1

CVSSv2

ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote malicious users to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame.

Arubanetworks Arubaos 3.3.2.6 Arubanetworks Arubaos 3.3.1.16 Arubanetworks Arubaos 3.3.2.14 Arubanetworks Arubaos 3.3.1.30 Arubanetworks Arubaos 3.4.0 Arubanetworks Arubaos 3.3.1.29 Arubanetworks Arubaos 3.1.1 Arubanetworks Aruba Mobility Controller

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook