Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22782
What is CVE-2023-22782?
Aruba Networks has identified buffer overflow vulnerabilities in its Access Point Management Protocol (PAPI). These vulnerabilities allow remote, unauthenticated attackers to execute arbitrary code on affected devices by sending specially crafted packets to the protocol's UDP port (8211). Successful exploitation could grant attackers privileged access to the underlying operating system, posing significant risks to network security. Users are advised to examine their systems and apply necessary mitigations to safeguard against potential threats.
Affected Version(s)
Aruba Access Points running InstantOS and ArubaOS 10 InstantOS 8.10.x.x: 8.10.0.2 and below
Aruba Access Points running InstantOS and ArubaOS 10 InstantOS 8.10.x.x: 8.10.0.2 and below
Aruba Access Points running InstantOS and ArubaOS 10 ArubaOS 10.3.x.x: 10.3.1.4 and below