All vulnerabilities

Servers and applications

CVE-2017-9000

ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An unauthenticated user with network access to an Aruba mobility controller on TCP port 8080 or 8081 may be able…

Severity
Critical 9.8
Published
6 Aug 2018
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
6.3.1.25, 6.4.4.16, 6.5.1.9, 6.5.3.3, 6.5.4.2, 8.1.0.4
Exploit chance
5.1% in the next 30 daysHigher than 92% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:hp:arubaos
  • From 8.0 before 8.1.0.4
  • From 6.5.4 before 6.5.4.2
  • From 6.5.3 before 6.5.3.3
  • Version 6.5.2
All 7 release lines
  • Every version before 6.3.1.25
  • From 6.4 before 6.4.4.16
  • From 6.5.0 before 6.5.1.9
  • Version 6.5.2
  • From 6.5.3 before 6.5.3.3
  • From 6.5.4 before 6.5.4.2
  • From 8.0 before 8.1.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-9000
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-9000