Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-35981
Summary
Several buffer overflow vulnerabilities have been identified in Aruba's access point management protocol (PAPI), specifically on UDP port 8211. These vulnerabilities can be exploited by unauthenticated attackers who send specially crafted packets to the affected devices. Successful exploitation may allow attackers to execute arbitrary code with privileged access on the operating system, potentially compromising the security and integrity of the network.
Affected Version(s)
Aruba Access Points running InstantOS and ArubaOS 10 ArubaOS 10.4.x.x: 10.4.0.1 and below
Aruba Access Points running InstantOS and ArubaOS 10 ArubaOS 10.4.x.x: 10.4.0.1 and below
Aruba Access Points running InstantOS and ArubaOS 10 InstantOS 8.11.x.x: 8.11.1.0 and below
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved