aruba mobility controller vulnerabilities and fixes

Recent CVEs affecting aruba mobility controller, with upgrade or downgrade steps. 4 tracked.

Also searched as: arubamobilitycontroller.

aruba mobility controller has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-11-02. Highest priority: CVE-2008-7023 (score 55/100).

• CVE-2009-3836 MEDIUM 6.1 MITIGATE MITIGATE ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote att
• CVE-2008-7095 HIGH 7.8 MITIGATE MITIGATE The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows re
• CVE-2008-7023 HIGH 10.0 MITIGATE MITIGATE Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.5
• CVE-2008-5563 HIGH 7.8 MITIGATE MITIGATE Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to c

FAQ

How do I fix aruba mobility controller vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is aruba mobility controller being exploited right now?

None of the tracked aruba mobility controller CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which aruba mobility controller CVE should I patch first?

CVE-2008-7023 currently ranks highest (55/100): Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.5.

RSS feed for aruba mobility controller · ← Back to latest CVEs