Database/Firmware, BMC & network fabric
ArubaOS-Switch (HPE Aruba wired switches): Remote arbitrary code execution on ArubaOS-Switch devices, affecting
Impact
Remote arbitrary code execution on ArubaOS-Switch devices, affecting every version of the 15.xx and early 16.xx trains. Aruba wired switches show up in GPU-cluster builds as the out-of-band management and provisioning fabric rather than the GPU data path — which makes RCE here a foothold on the network that reaches every BMC in the building.
Who can reach it
Remote to the switch's services. No credentials in the affected paths.
What to do
ArubaOS-Switch firmware upgrade plus switch reload. Management switches are usually not redundant the way the GPU fabric is, so a reload means the OOB network drops — schedule it when you do not need remote console. Restrict management-plane reachability first.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.