9.8
Critique
CVE-2023-35980 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code…
Description
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aruba Access Points running InstantOS and ArubaOS 10 | Versions non publiées | |
| arba_access_points_running_instantos_and_arubaos_10 10.4 | premières → < 10.4.0.1 | 10.4.0.1 |
| arba_access_points_running_instantos_and_arubaos_10 8.11 | premières → < 8.11.1.0 | 8.11.1.0 |
| arba_access_points_running_instantos_and_arubaos_10 8.10 | premières → < 8.10.0.6 | 8.10.0.6 |
| arba_access_points_running_instantos_and_arubaos_10 8.6 | premières → < 8.6.0.20 | 8.6.0.20 |
| arba_access_points_running_instantos_and_arubaos_10 6.5 | premières → < 6.5.4.24 | 6.5.4.24 |
| arba_access_points_running_instantos_and_arubaos_10 4.2 | premières → < 4.2.4.21 | 4.2.4.21 |
Autres CVE de Aruba Access Points running InstantOS and ArubaOS 10
Les 16 CVE de Aruba Access Points running InstantOS and ArubaOS 10 →
CVE-2023-35982
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code…
9.8
Critique
CVE-2023-35981
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code…
9.8
Critique
CVE-2023-22791
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration,…
5.4
Moyenne
CVE-2023-22790
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command…
7.2
Élevée