Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

CVE-2023-22786

What is CVE-2023-22786?

Aruba Networks has identified critical buffer overflow vulnerabilities in its access point management protocol, specifically affecting the PAPI service over UDP port 8211. These vulnerabilities allow unauthorized attackers to send specially crafted packets, potentially enabling unauthenticated remote code execution. If exploited, these vulnerabilities could lead to execution of arbitrary code as a privileged user, posing significant risks to the affected systems. It is crucial for users of impacted Aruba Access Points to apply the latest security patches to mitigate these risks.

References