Hewlett Packard Enterprise patches 72 vulnerabilities in Aruba products
Summary
HPE has released patches for 72 vulnerabilities in its Aruba networking products, specifically targeting the AOS-8 and AOS-10 wireless operating systems, which include 33 critical-severity flaws. Among these are eight high-risk bugs that could allow unauthenticated attackers to execute remote code, bypass authentication, and compromise systems. HPE has urged customers to apply these patches immediately, noting that it is unaware of any exploits in the wild. To further mitigate risks, the company recommends restricting management interfaces to dedicated VLANs and implementing firewall controls.
Analysis
AOS-8: AOS-8 is a wireless operating system powering HPE Aruba networking products such as mobility conductors, controllers, gateways, and access points. The security advisory details patches for multiple critical and high-severity vulnerabilities in specific AOS-8 versions including 8.10.0.24 and 8.13.3.1. These updates mitigate threats like unauthenticated remote code execution and authentication bypass across compatible hardware and virtual machines. AOS-10: AOS-10 is a wireless operating system developed by HPE for its Aruba networking portfolio. Recent patches address eight max-severity bugs and additional critical flaws in versions such as 10.4.1.14, 10.7.2.7, and 10.8.1.2. The fixes target risks including remote code execution, command execution, and full system compromise on affected devices. Hewlett Packard Enterprise: Hewlett Packard Enterprise is a multinational technology company specializing in enterprise IT solutions, including hardware, software, and services for networking and mobility. Through its Aruba brand, HPE develops wireless operating systems used in controllers, gateways, and access points. In this news, HPE issued patches for dozens of vulnerabilities, including critical flaws in AOS-8 and AOS-10, to address risks of remote code execution and system compromise. Vulnerability Response: HPE states it is unaware of active exploitation of the disclosed flaws but urges immediate application of patches across all compatible systems. Security Recommendations: HPE advises restricting CLI and web management interfaces to dedicated VLANs or controlling them via firewall policies to reduce exploitation risks.
Categories
tech