High · published October 14, 2025
⚡ An authenticated command injection vulnerability lurks in the CLI binary of AOS-8 Controller/Mobility Conductor! With the right malicious credentials, an attacker could wreak havoc on your system. 🚨 Think of it like a restaurant where a waiter can not only take orders but also access the kitchen and change recipes — a dangerous setup if that waiter has ill intentions! If exploited, the attacker could execute arbitrary commands as a privileged user, leading to complete control over the underlying operating system. This means they could manipulate critical configurations, access sensitive data, or even bring services to a halt — absolutely devastating!
Think of it like a restaurant where a waiter can not only take orders but also access the kitchen and change recipes — a dangerous setup if that waiter has ill intentions! This vulnerability allows an authenticated malicious actor to inject commands through the command line interface, taking advantage of insufficient validation to execute unauthorized actions at a high privilege level.
If exploited, the attacker could execute arbitrary commands as a privileged user, leading to complete control over the underlying operating system. This means they could manipulate critical configurations, access sensitive data, or even bring services to a halt — absolutely devastating! To protect your system, patch the AOS-8 Controller to the latest version as soon as it becomes available. Regularly review user permissions to ensure that only trusted individuals have access. 👍 You've got this! With prompt action and a keen eye, you'll secure your setup in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| arubanetworks/arubaos | ≥ 8.10.0.0, < 8.10.0.19 | 8.10.0.19 |
| arubanetworks/arubaos | ≥ 8.12.0.0, < 8.12.0.6 | 8.12.0.6 |
| arubanetworks/arubaos | ≥ 8.13.0.0, < 8.13.1.0 | 8.13.1.0 |
| arubanetworks/arubaos | ≥ 10.4.0.0, < 10.4.1.9 | 10.4.1.9 |
| arubanetworks/arubaos | ≥ 10.7.0.0, < 10.7.2.1 | 10.7.2.1 |