HP Arubaos vulnerabilities

9 CVEs affecting HP Arubaos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22786, published 2023-05-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-9000, published 2018-08-06. Critical severity, CVSS 9.8. EPSS: 5.1% chance of exploitation in the next 30 days. ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of…
CVE-2023-22786, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…
CVE-2023-22779, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…
CVE-2023-22785, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…
CVE-2023-22784, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…
CVE-2023-22783, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…
CVE-2023-22782, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…
CVE-2023-22781, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…
CVE-2023-22780, published 2023-05-08. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's…