Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22783
What is CVE-2023-22783?
Aruba Networks has identified buffer overflow vulnerabilities within the PAPI, which is responsible for managing access points. These vulnerabilities can enable attackers to execute arbitrary code on the underlying operating system by sending specially crafted packets to the PAPI UDP port (8211). If successfully exploited, these vulnerabilities could allow an unauthenticated user to gain elevated privileges, compromising network security and enabling unauthorized access to sensitive systems.
Affected Version(s)
Aruba Access Points running InstantOS and ArubaOS 10 InstantOS 8.10.x.x: 8.10.0.2 and below
Aruba Access Points running InstantOS and ArubaOS 10 InstantOS 8.10.x.x: 8.10.0.2 and below
Aruba Access Points running InstantOS and ArubaOS 10 ArubaOS 10.3.x.x: 10.3.1.4 and below