HP News Articles
Recent news articles refferecing the vendors vulnerabilities.

HPE Security Patches CVE-2024-42509 In Aruba Access Points
HPE releases critical patches for CVE-2024-42509, addressing remote code execution risks in Aruba Access Points.
HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities
HPE addresses critical flaws in Aruba Access Points, preventing remote code execution for secure networking
Multiple Flaws in ArubaOS Switches Let Attackers Execute Remote Code
Multiple vulnerabilities have been identified in ArubaOS-Switch Switches, specifically pertaining to Stored Cross-site Scripting (Stored XSS), Denial of Service (DoS), and Memory corruption. Aruba has taken measures to mitigate these vulnerabilities and has subsequently published a security advisory...

CVE-2024-31471 : ARUBA INSTANTOS/ARUBAOS CENTRAL COMMUNICATONS SERVICE COMMAND INJECTION - Cloud WAF
CVE-2024-31471 : There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).