ArubaOS flaws could expose wireless network controls
HPE released fixes for 72 vulnerabilities in Aruba Networking AOS-8 and AOS-10, including eight max-severity flaws, SecurityWeek reported. SecurityWeek counts 33 critical flaws; CSIRT Italia counts 32. HPE says it is not aware of exploitation in the wild.
Successful attacks could let unauthenticated attackers run code or commands, bypass authentication and gain administrative access, potentially compromising affected systems. The flaws affect AOS across mobility conductors, controllers, gateways, access points and compatible virtual machines (VMs).
If ArubaOS runs across those devices in your environment, the affected footprint spans the Wi-Fi estate, not just a central controller. The sources describe potential compromise of affected systems but do not establish a broader control-plane takeover.
Rilasciati aggiornamenti di sicurezza che sanano molteplici vulnerabilità, di cui 32 con gravità “critica” e 31 con gravità “alta”, in HPE Aruba Networking AOS-8 e AOS-10, sistemi operativi di rete per la gestione delle infrastrutture Wi-Fi aziendali.