Erik De Jong (bugcrowd.com/erikdejong)

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP po

Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Multiple Unauthenticated Command Injections in the PAPI Protocol

Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated Remote Command Execution in the ArubaOS Command Line Interface