Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.
2025-04-08T17:15:36.887
2025-11-12T20:27:45.130
Analyzed
CVSSv3.1: 4.9 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | arubanetworks | arubaos | < 8.10.0.16 | Yes |
| Operating System | arubanetworks | arubaos | < 8.12.0.4 | Yes |
| Operating System | arubanetworks | arubaos | < 10.4.1.7 | Yes |
| Operating System | arubanetworks | arubaos | < 10.7.1.1 | Yes |