Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying host operating system.
2025-04-08T17:15:36.233
2025-11-12T19:18:28.133
Analyzed
CVSSv3.1: 7.2 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | arubanetworks | arubaos | < 8.10.0.16 | Yes |
| Operating System | arubanetworks | arubaos | < 8.12.0.4 | Yes |
| Operating System | arubanetworks | arubaos | < 10.4.1.7 | Yes |
| Operating System | arubanetworks | arubaos | < 10.7.1.1 | Yes |