Sd-wan (Arubanetworks) - vulnerabilities (CVEs)

103 CVEs, 0 in the last 30 days, 55 known versions, newest CVE from 2026-05-12. Vendor: Arubanetworks.

CVEs of Sd-wan

CVE-2026-44871 - CVSS 8.8 (high), 2026-05-12: Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.…
CVE-2026-44870 - CVSS 8.8 (high), 2026-05-12: Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.…
CVE-2026-44866 - CVSS 8.8 (high), 2026-05-12: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these…
CVE-2026-44869 - CVSS 8.8 (high), 2026-05-12: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these…
CVE-2026-44873 - CVSS 5.4 (medium), 2026-05-12: A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled.…
CVE-2026-44865 - CVSS 7.2 (high), 2026-05-12: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these…
CVE-2026-44868 - CVSS 8.8 (high), 2026-05-12: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these…
CVE-2026-44872 - CVSS 7.2 (high), 2026-05-12: A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an…
CVE-2026-44864 - CVSS 7.2 (high), 2026-05-12: SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management…
CVE-2026-44867 - CVSS 8.8 (high), 2026-05-12: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these…
CVE-2026-44854 - CVSS 7.2 (high), 2026-05-12: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an…
CVE-2026-44857 - CVSS 7.2 (high), 2026-05-12: Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8…
CVE-2026-44860 - CVSS 7.2 (high), 2026-05-12: SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management…
CVE-2026-44863 - CVSS 7.2 (high), 2026-05-12: SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management…
CVE-2026-44856 - CVSS 7.2 (high), 2026-05-12: Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8…
CVE-2026-44859 - CVSS 7.2 (high), 2026-05-12: Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8…
CVE-2026-44862 - CVSS 7.2 (high), 2026-05-12: SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management…
CVE-2026-44855 - CVSS 7.2 (high), 2026-05-12: Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8…
CVE-2026-44858 - CVSS 7.2 (high), 2026-05-12: Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8…
CVE-2026-44861 - CVSS 7.2 (high), 2026-05-12: SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management…
CVE-2026-44853 - CVSS 7.2 (high), 2026-05-12: Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an…
CVE-2026-44852 - CVSS 7.2 (high), 2026-05-12: An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the certificate…
CVE-2026-23826 - CVSS 7.5 (high), 2026-05-12: A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by…
CVE-2026-23825 - CVSS 7.5 (high), 2026-05-12: Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities…
CVE-2026-23824 - CVSS 7.5 (high), 2026-05-12: Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities…
CVE-2026-23827 - CVSS 7.5 (high), 2026-05-12: A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to…
CVE-2024-33518 - CVSS 5.3 (medium), 2024-05-01: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation…
CVE-2024-33517 - CVSS 7.5 (high), 2024-05-01: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation…
CVE-2024-33516 - CVSS 7.5 (high), 2024-05-01: An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful…
CVE-2024-33515 - CVSS 7.5 (high), 2024-05-01: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these…
CVE-2024-33514 - CVSS 7.5 (high), 2024-05-01: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these…
CVE-2024-33513 - CVSS 5.9 (medium), 2024-05-01: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these…
CVE-2024-33512 - CVSS 9.8 (critical), 2024-05-01: There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution…
CVE-2024-33511 - CVSS 9.8 (critical), 2024-05-01: There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending…
CVE-2024-26304 - CVSS 9.8 (critical), 2024-05-01: There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending…
CVE-2024-26305 - CVSS 9.8 (critical), 2024-05-01: There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially…
CVE-2024-25615 - CVSS 5.3 (medium), 2024-03-05: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation…
CVE-2024-25613 - CVSS 7.2 (high), 2024-03-05: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2024-25612 - CVSS 7.2 (high), 2024-03-05: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2024-25611 - CVSS 7.2 (high), 2024-03-05: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2024-1356 - CVSS 7.2 (high), 2024-03-05: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22771 - CVSS 6.8 (medium), 2023-03-01: An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an…
CVE-2023-22774 - CVSS 7.2 (high), 2023-03-01: Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22777 - CVSS 6.5 (medium), 2023-03-01: An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability…
CVE-2023-22773 - CVSS 7.2 (high), 2023-03-01: Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22776 - CVSS 4.9 (medium), 2023-03-01: An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the…
CVE-2023-22772 - CVSS 6.5 (medium), 2023-03-01: An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in…
CVE-2023-22775 - CVSS 6.5 (medium), 2023-03-01: A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation…
CVE-2023-22778 - CVSS 4.8 (medium), 2023-03-01: A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack…
CVE-2023-22768 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22758 - CVSS 7.2 (high), 2023-03-01: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities…
CVE-2023-22761 - CVSS 7.2 (high), 2023-03-01: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities…
CVE-2023-22764 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22767 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22770 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22757 - CVSS 9.8 (critical), 2023-03-01: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by…
CVE-2023-22760 - CVSS 7.2 (high), 2023-03-01: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities…
CVE-2023-22763 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22766 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22769 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22756 - CVSS 9.8 (critical), 2023-03-01: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by…
CVE-2023-22759 - CVSS 7.2 (high), 2023-03-01: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities…
CVE-2023-22762 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22765 - CVSS 7.2 (high), 2023-03-01: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the…
CVE-2023-22752 - CVSS 9.8 (critical), 2023-03-01: There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined…
CVE-2023-22755 - CVSS 9.8 (critical), 2023-03-01: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by…
CVE-2023-22748 - CVSS 9.8 (critical), 2023-03-01: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to…
CVE-2023-22751 - CVSS 9.8 (critical), 2023-03-01: There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined…
CVE-2023-22754 - CVSS 9.8 (critical), 2023-03-01: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by…
CVE-2023-22747 - CVSS 9.8 (critical), 2023-03-01: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to…
CVE-2023-22750 - CVSS 9.8 (critical), 2023-03-01: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to…
CVE-2023-22753 - CVSS 9.8 (critical), 2023-03-01: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by…
CVE-2023-22749 - CVSS 9.8 (critical), 2023-03-01: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to…
CVE-2022-37908 - CVSS 6.5 (medium), 2022-12-12: An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware…
CVE-2022-37911 - CVSS 5.5 (medium), 2022-12-12: Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an…
CVE-2022-37907 - CVSS 7.5 (high), 2022-12-12: A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system. A…
CVE-2022-37910 - CVSS 6.5 (medium), 2022-12-12: A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in a denial of service on…
CVE-2022-37906 - CVSS 8.1 (high), 2022-12-12: An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the…
CVE-2022-37909 - CVSS 5.3 (medium), 2022-12-12: Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The scenarios in which…
CVE-2022-37912 - CVSS 8.8 (high), 2022-12-12: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the…
CVE-2022-37902 - CVSS 7.2 (high), 2022-12-12: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the…
CVE-2022-37905 - CVSS 8.8 (high), 2022-12-12: Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful…
CVE-2022-37898 - CVSS 7.2 (high), 2022-12-12: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the…
CVE-2022-37901 - CVSS 7.2 (high), 2022-12-12: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the…
CVE-2022-37904 - CVSS 8.8 (high), 2022-12-12: Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful…
CVE-2022-37897 - CVSS 9.8 (critical), 2022-12-12: There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI…
CVE-2022-37900 - CVSS 7.2 (high), 2022-12-12: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the…
CVE-2022-37903 - CVSS 8.8 (high), 2022-12-12: A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful…
CVE-2022-37899 - CVSS 7.2 (high), 2022-12-12: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the…
CVE-2021-37731 - CVSS 6.2 (medium), 2021-09-07: A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37729 - CVSS 6.5 (medium), 2021-09-07: A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37733 - CVSS 4.9 (medium), 2021-09-07: A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37716 - CVSS 9.8 (critical), 2021-09-07: A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37719 - CVSS 7.2 (high), 2021-09-07: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37722 - CVSS 7.2 (high), 2021-09-07: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37718 - CVSS 7.2 (high), 2021-09-07: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37721 - CVSS 7.2 (high), 2021-09-07: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37717 - CVSS 7.2 (high), 2021-09-07: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37720 - CVSS 7.2 (high), 2021-09-07: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to…
CVE-2021-37725 - CVSS 8.1 (high), 2021-09-07: A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s):…