AOS vulnerabilities

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS. An authenticated remote attacker with high privileges could inject malicious scripts. Successful exploitation could execute arbitrary script code in the context of another authenticated user's browser session.