A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-si

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• arubanetworks arubaos10.3.0.0 and later · before 10.3.1.1
• arubanetworks instant6.4.0.0 and later · before 6.4.4.8-4.2.4.21
• arubanetworks instant6.5.0.0 and later · before 6.5.4.24
• arubanetworks instant8.6.0.0 and later · before 8.6.0.19
• arubanetworks instant8.7.0.0 and later · before 8.7.1.10
• arubanetworks instant8.10.0.0 and later · before 8.10.0.2
• siemens scalance w1750d firmwareall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (hpe). Independent of NVD's CPE analysis and usually ahead of it.

• n/a Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Acc

  • Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below, Aruba InstantOS 6.5.x: 6.5.4.23 and below, Aruba InstantOS 8.6.x: 8.6.0.18 and below, Aruba InstantOS 8.7.x: 8.7.1.9 and below, Aruba InstantOS 8.10.x: 8.10.0.1 and below, ArubaOS 10.3.x: 10.3.1.0 and belowaffected

Other highest-scoring records for the same primary product.

• CVE-2020-24633There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted pa
  41Plan
• CVE-2018-7081A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS.
  41Plan
• CVE-2023-45616There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution b
  40Plan
• CVE-2023-45615There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending
  40Plan
• CVE-2023-45614There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending
  40Plan
• CVE-2023-35982Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
  40Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

User content is inserted into the page as HTML. The browser interprets the content as code rather than data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1commentEl.innerHTML = comment.body;

1commentEl.textContent = comment.body;

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.