72 Flaws in ArubaOS
HPE patched 72 ArubaOS flaws, including eight maximum-severity bugs that remote attackers without privileges can exploit in low-complexity attacks.
Key terms
AP Cybersecurity alignment
- 3.3.A.3Switches can be used to create VLANs, which logically separate devices physically connected to central switches.Learning objective: Identify techniques for segmenting a network.
- 4.3.C.2Ensuring that a computer’s operating system and software applications are updated to the most recent version prevents adversaries from taking advantage of a known vulnerability.Learning objective: Explain why keeping a device’s operating system and software updated makes it more secure.
- 5.6.A.1Devices track and log when data are accessed and by whom. The process of recording and monitoring user activities is called accounting. Analysis of these logs can reveal malicious activity when an adversary attempts to access,…Learning objective: Explain how to detect attacks on data.
AP Networking alignment
- 1.4.B.3To prevent exploitation of known vulnerabilities that can lead to device compromise or data loss, users should keep all software and firmware current. Software refers to applications and operating systems, while firmware is…Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 4.5.B.4Security controls to limit the impact of unauthorized access include: • enforcing strong password policies and account lockout settings • applying the principle of least privilege • implementing segmentation to restrict access…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a managed network.
- 4.5.D.1VLANs improve network security and performance by logically separating devices into isolated groups, such as departments, user roles, or device types. Devices in different VLANs cannot communicate unless routing is enabled.…Learning objective: Explain how to configure a VLAN.