HPE Aruba Networking AOS-8 and AOS-10 Mobility Conductors Command-Line Interface Arbitrary File Deletion Vulnerability

An arbitrary file deletion vulnerability exists in the command-line interface of HPE Aruba Networking Mobility Conductors running AOS-10 or AOS-8 operating systems. This vulnerability allows an authenticated remote attacker to delete arbitrary files on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of files, potentially causing disruption or degradation of service on the affected system.

Remediation

To address this vulnerability, users should upgrade to AOS-10.7.2.2 and above or AOS-8.13.1.1 and above. For AOS-10.4.x.x, upgrade to version 10.4.1.10 and above, and for AOS-8.10.x.x, upgrade to version 8.10.0.21 and above. These updates can be downloaded from the HPE Networking Support Portal.