HPE Aruba AOS-8 tizimidagi jiddiy zaiflik xakerlarga SSH autentifikatsiyasini chetlab o'tish va tizimlarni egallab olish imkonini beradi

Hewlett Packard Enterprise (HPE) o'zining AOS-8 simsiz operatsion tizimidagi SSH demonidagi muhim autentifikatsiyani chetlab o'tish zaifligini bartaraf etdi.

CVE-2026-79855 sifatida kuzatilgan ushbu zaiflik masofadan, autentifikatsiyasiz hujumchiga ma'muriy huquqlarni qo'lga kiritish va ta'sirlangan xostni to'liq egallab olish imkonini berishi mumkin.

U CVSS v3.1 bo'yicha 9,8 ballga ega bo'lib, yuqori jiddiylikni ko'rsatadi. Hujumchilar zaiflikni tarmoq orqali past murakkablik bilan, ma'lumotlarsiz yoki foydalanuvchi aralashuvisiz ishlatishi mumkin va bu maxfiylik, yaxlitlik va mavjudlikka sezilarli ta'sir ko'rsatadi.

HPE ushbu muammoni aniqlagan ichki tarmoq xavfsizligi tadqiqotchilariga minnatdorchilik bildirdi. 2026-yil 22-oktabrda e'lon qilingan kengroq HPESBNW05162 xavfsizlik byulleteni SSH zaifligi haqida batafsil ma'lumot beradi.

Byulleten AOS-8 va AOS-10 bo'yicha 72 ta zaiflikni hujjatlashtiradi, jumladan autentifikatsiyani chetlab o'tish, buyruq va SQL in'ektsiyasi, bufer to'lib ketishi, xotira buzilishi, yo'l o'tishi, ma'lumot oshkor etilishi, saytlararo skriptlash, fayl manipulyatsiyasi va xizmatni rad etish sharoitlari.

Ushbu zaifliklarning bir nechtasi maksimal CVSS balli 10,0 ga ega va autentifikatsiyasiz masofadan kod bajarish imkonini beradi.

Ta'sirlangan dasturiy ta'minot versiyalari AOS-10 10.8.1.1 va undan oldingi, 10.7.2.6 va undan oldingi, hamda 10.4.1.13 va undan oldingi qo'llab-quvvatlanadigan tarmoqlarda. AOS-8 o'rnatmalari 8.13.3.0 va undan oldingi yoki 8.10.0.23 va undan oldingi versiyalarda ham zaif. Ta'sir mos keladigan Mobility Conductors, Mobility Controllers, Central-boshqariladigan Mobility Gateways, AOS-10 kirish nuqtalari, AOS-8 Instant kirish nuqtalari va tegishli virtual o'rnatmalarga ham tarqaladi.

Hujumchilar turli zaifliklardan foydalanib imtiyozli nazoratni qo'lga kiritishi, simsiz konfiguratsiyalarni o'zgartirishi, sezgir ma'lumotlarga kirishi, fayl tizimlarini buzishi, tarmoq xizmatlarini to'xtatishi yoki asosiy operatsion tizimda kod bajarishi mumkin. Ayniqsa, PAPI kirish nuqtasi boshqaruv protokoliga ta'sir qiluvchi muammolar xavotirli.

Masalan, CVE-2026-79860 UDP port 8211 ni maxsus tayyorlangan paketlar bilan nishonga oladi. Boshqa PAPI zaifliklari ham buyruq in'ektsiyasi, SQL in'ektsiyasi, bufer to'lib ketishi yoki autentifikatsiyani chetlab o'tish imkonini beradi.

Ma'murlar darhol AOS-10 10.8.1.2, 10.7.2.7 yoki 10.4.1.14 ga, o'zlarining reliz tarmog'iga qarab yangilashlari tavsiya etiladi. AOS-8 foydalanuvchilari 8.13.3.1 yoki 8.10.0.24 ga yangilashlari kerak.

HPE byulleten e'lon qilinganida ushbu zaifliklar bilan bog'liq hech qanday ommaviy muhokama yoki ekspluatatsiya kodi haqida xabardor emasligini aytdi, lekin ularning kengligi, murakkabligi va potentsial ta'siri tufayli tezkor yamash zarurligini ta'kidladi.

Agar darhol yangilash mumkin bo'lmasa, HPE buyruq qatori va veb-boshqaruv interfeyslarini maxsus Layer 2 segmenti yoki VLAN da ajratish, Layer 3 yoki undan yuqori xavfsizlik devori nazoratini joriy etish va foydalanuvchi faoliyati va resurslardan foydalanishni kuzatish va qayd etish uchun hisoblash mexanizmlarini amalga oshirishni tavsiya qiladi. Ushbu choralar ta'sirni kamaytirishi mumkin, lekin ular sotuvchi tuzatishlarini almashtirmaydi.

Maslahat boshqaruv tekisligiga kirishni cheklash muhimligini ta'kidlaydi. Ko'plab zaifliklar imtiyozlar yoki foydalanuvchi aralashuvini talab qilmaydi, bu esa ochiq ma'muriy xizmatlarni infratuzilmani buzish uchun potentsial yo'lga aylantiradi.

Xavfsizlik jamoalari qurilma va virtual nusxalarni inventarizatsiya qilishi, ishlatilayotgan dasturiy ta'minot versiyalarini tekshirishi, boshqaruv kirishi uchun xavfsizlik devori va autentifikatsiya jurnallarini ko'rib chiqishi va internetga ochiq yoki boshqa o'rnatmalardan oldin erishish mumkin bo'lgan tizimlarga ustuvorlik berishi kerak. Shuningdek, agar buzilish shubha qilingan bo'lsa, ma'lumotlarni aylantirish kerak.

Barcha CVE tafsilotlari

Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system.

This vulnerability, tracked as CVE-2026-79855, could let a remote, unauthenticated attacker gain administrative privileges and fully compromise an affected host.

It has a CVSS v3.1 score of 9.8, indicating a high severity. Attackers can exploit the vulnerability over a network with low complexity, without credentials or user interaction, and it on significantly impact confidentiality, integrity, and availability.

HPE credited its internal networking security researchersfor identifying this issue. The larger HPESBNW05162 security bulletin, published on October 22, 202, details the SSH vulnerability6.

The bulletin documents 72 vulnerabilities across AOS-8 and AOS-10, including authentication bypasses, command and SQL injection, buffer overflows, memory corruption, path traversal, information disclosure, cross-site scripting, file manipulation, and denial-of-service conditions.

Several of these vulnerabilities received the maximum CVSS score of 10.0 and enable unauthenticated remote code execution.

Affected software versions include AOS-10 10.8.1.1 and earlier, 10.7.2.6 and earlier, and 10.4.1.13 and earlier within the supported branches.

AOS-8 installations running 8.13.3.0 and earlier or 8.10.0.23 and earlier are also vulnerable. The exposure extends to compatible Mobility Conductors, Mobility Controllers, Central-managed Mobility Gateways, AOS-10 access points, AOS-8 Instant access points, and associated virtual deployments.

Attackers could exploit various weaknesses to gain privileged control, alter wireless configurations, access sensitive data, compromise filesystems, disrupt network services, or execute code on the underlying operating system. Particularly concerning issues affect the PAPI access-point management protocol.

For example, CVE-2026-79860 targets UDP port 8211 with crafted packets. Other PAPI vulnerabilities also allow command injection, SQL injection, buffer overflows, or authentication bypass.

Administrators are urged to upgrade immediately to AOS-10 10.8.1.2, 10.7.2.7, or 10.4.1.14, depending on their release branch. AOS-8 users should update to 8.13.3.1 or 8.10.0.24.

HPE said it was unaware of any public discussions or exploit code related to these vulnerabilities when it released the bulletin, but emphasized the need for rapid patching because of their breadth, complexity, and potential impact.

If immediate upgrades are not feasible, HPE recommends isolating command-line and web-management interfaces on a dedicated Layer 2 segment or VLAN, enforcing Layer 3 or higher firewall controls, and implementing accounting mechanisms to track and log user activity and resource usage. While these measures can reduce exposure, they do not replace the need for vendor fixes.

The advisory underscores the importance of limiting access to the management plane. Many vulnerabilities don’t require privileges or user interaction, making exposed administrative services a potential pathway to compromise infrastructure.

Security teams should inventory appliance and virtual instances, verify the software versions in use, review firewall and authentication logs for management access, and prioritize systems that are internet-accessible or reachable before addressing other deployments. Also, rotate credentials if a compromise is suspected.

All CVE Details

Stops Cyber threats before impact with 21 min faster MTTR. Integrate ANYRUN’s Sandbox in your SOC.