HPE Patches 72 Vulnerabilities in ArubaOS Including Eight CVSS 10.0 Flaws
HPE released security updates for ArubaOS to fix 72 vulnerabilities, including 33 critical flaws that allow unauthenticated remote code execution and authentication bypass on wireless infrastructure.
**If you use HPE Aruba devices running ArubaOS (AOS-8 or AOS-10), upgrade ASAP to a fixed version (AOS-10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1 or 8.10.0.24). The patch has dozens of critical flaws let attackers take full control without a password. Make sure the web and CLI management interfaces are never reachable from the internet and can only be accessed from a dedicated, trusted management network.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/hpe-patches-72-vulnerabilities-in-arubaos-including-eight-cvss-10-0-flaws-m-1-k-i-d/gD2P6Ple2L
BeyondMachinesHPE Patches 72 Vulnerabilities in ArubaOS Including Eight CVSS 10.0 FlawsHPE released security updates for ArubaOS to fix 72 vulnerabilities, including 33 critical flaws that allow unauthenticated remote code execution and authentication bypass on wireless infrastructure.