Unauthenticated Remote Code Execution through Command Injection Vulnerabilities

CVE-2024-42505

Summary

The vulnerability presents command injection risks within Aruba's Command Line Interface (CLI) service, which could allow unauthorized remote code execution. Attackers may exploit this vulnerability by sending specially crafted packets to the Protocol for Access Point Management Interface (PAPI) over UDP port 8211. Successful exploitation permits execution of arbitrary code with elevated privileges on the operating system, posing significant security risks to affected Aruba Access Points. Organizations utilizing vulnerable products should assess their exposure and apply recommended mitigations to secure their network infrastructure.

References