Created on 2024-11-06 16:21 and updated on 2024-11-06 16:23.

Description

HPE Aruba Networking has released software patches for Access Points running Instant AOS-8 and AOS-10 that address multiple security vulnerabilities.

Reference - https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04722.txt

Vulnerabilities included in this bundle

• CVE-2024-47462: Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)
• CVE-2024-47460: Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol
• CVE-2024-42509:
• CVE-2024-47464:
• CVE-2024-47461:
• CVE-2024-47463:

Author

Alexandre Dulaunoy

---

Combined sightings