HPE patches eight max severity RCE and auth bypass AOS flaws
-
HPE has released security updates addressing 72 vulnerabilities in ArubaOS, the operating system powering its Aruba networking gear. Among the fixes are eight maximum-severity flaws that could allow authentication bypass and remote code execution.
The most critical issues fall into two categories: authentication bypass vulnerabilities that could let attackers sidestep login controls, and RCE flaws that could enable arbitrary code execution on affected systems. Given the maximum severity rating, these should be treated as high-priority patching targets for anyone running ArubaOS in their environment.
Administrators running ArubaOS should review HPE's advisory and apply the available updates as soon as possible. As always, prioritize internet-facing and edge devices first, and check whether any of the addressed flaws impact hardware models or software branches currently deployed in your network.
Source: BleepingComputer
Are any of your ArubaOS devices exposed to these flaws, and have you scheduled the patch yet?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login