HPE Alert
2803Warning Date
Severity Level
Warning Number
Target Sector
27 February, 2022
● High
2022-4447
All
HPE has released a security update to address several vulnerabilities in the following products:
- Aruba Analytics and Location Engine:
- ALE 2.2.0.x: 2.2.0.1 and below
- Aruba Central On Prem (COP)
- Aruba ClearPass Policy Manager:
- CPPM 6.10.x: 6.10.3 and below
- CPPM 6.9.x: 6.9.9 and below
- CPPM 6.8.x: 6.8.9-HF1 and below
- CPPM 6.7.x: All versions 6.7.x and below
- AOS-CX firmware:
- AOS-CX 10.06.xxxx: 10.06.0170 and below
- AOS-CX 10.07.xxxx: 10.07.0050 and below
- AOS-CX 10.08.xxxx: 10.08.1030 and below
- AOS-CX 10.09.xxxx: 10.09.0002 and below
An attacker could exploit these vulnerabilities by doing the following:
- Escalation of Privilege
The CERT team encourages users to review HPE security advisory and apply the necessary update: