An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system. Exploitation of this vulnerability requires physical access to the hardware controllers. A successful attack could allow an authenticated malicious actor with physical access to execute arbitrary commands as a privileged user on the underlying operating system.
2025-10-14T17:15:40.557
2025-11-12T21:05:32.987
Analyzed
CVSSv3.1: 6.2 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | arubanetworks | arubaos | < 8.10.0.19 | Yes |
| Operating System | arubanetworks | arubaos | < 8.12.0.6 | Yes |
| Operating System | arubanetworks | arubaos | < 8.13.1.0 | Yes |
| Operating System | arubanetworks | arubaos | < 10.4.1.9 | Yes |
| Operating System | arubanetworks | arubaos | < 10.7.2.1 | Yes |