Aruba Alert
2956Warning Date
Severity Level
Warning Number
Target Sector
22 May, 2022
● Critical
2022-4863
All
Description:
Aruba has released security updates to address multiple vulnerabilities in the following products:
- Aruba Switch Models:
- Aruba 2530 Series Switches
- Aruba 2540 Series Switches
- Aruba 2615 Series Switches
- Aruba 2620 Series Switches
- Aruba 2915 Series Switches
- Aruba 2920 Series Switches
- Aruba 2930F Series Switches
- Aruba 2930M Series Switches
- Aruba 3800 Series Switches
- Aruba 3810 Series Switches
- Aruba 5400 Series Switches
- Aruba 5400R Series Switches
- Software branch versions:
- AOS-S 15.xx.xxxx: A.15.16.0023 and below.
- AOS-S 16.01.xxxx: All versions.
- AOS-S 16.02.xxxx: K.16.02.0033 and below.
- AOS-S 16.03.xxxx: All versions.
- AOS-S 16.04.xxxx: KA/RA.16.04.0024 and below.
- AOS-S 16.05.xxxx: All versions.
- AOS-S 16.06.xxxx: All versions.
- AOS-S 16.07.xxxx: All versions.
- AOS-S 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below.
- AOS-S 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below.
- AOS-S 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below.
- AOS-S 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0003 and below.
Threats:
An attacker could exploit these vulnerabilities by doing the follwoing:
- Buffer overflow
Best practice and Recommendations:
The CERT team encourages users to review Aruba security advisory and apply the necessary updates: