Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

CVE-2023-22785

What is CVE-2023-22785?

Multiple buffer overflow vulnerabilities exist within critical services of Aruba Networks' Access Point Management Protocol (PAPI). These vulnerabilities can be exploited by sending specifically crafted packets to the designated UDP port (8211), potentially allowing unauthenticated attackers to execute arbitrary code with elevated privileges on the affected systems. As a result, this poses a significant risk to network integrity, enabling malicious actors to gain control over critical network infrastructure.

References