Servers and applications
CVE-2017-9000
ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An unauthenticated user with network access to an Aruba mobility controller on TCP port 8080 or 8081 may be able…
- Severity
- Critical 9.8
- Published
- 6 Aug 2018
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 3 Nov 2026
- Fixed in
- 6.3.1.25, 6.4.4.16, 6.5.1.9, 6.5.3.3, 6.5.4.2, 8.1.0.4
- Exploit chance
- 5.1% in the next 30 daysHigher than 92% of CVEs. EPSS by FIRST, 10 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
HPE ArubaOSServers and applications · cpe:o:hp:arubaos |
All 7 release lines
|