Aruba Alert
7348Warning Date
Severity Level
Warning Number
Target Sector
28 September, 2022
● Critical
2022-5279
All
Aruba has released a security update to address several vulnerabilities in the following products:
- InstantOS and ArubaOS 10
- Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below
- Aruba InstantOS 6.5.x: 6.5.4.23 and below
- Aruba InstantOS 8.6.x: 8.6.0.18 and below
- Aruba InstantOS 8.7.x: 8.7.1.9 and below
- Aruba InstantOS 8.10.x: 8.10.0.1 and below
- ArubaOS 10.3.x: 10.3.1.0 and below
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS)
- Cross-site scripting (XSS)
- Execute arbitrary code remotely
The CERT team encourages users to review Aruba security advisory and apply the necessary updates: