Summary
Aruba Networks heeft kwetsbaarheden verholpen in ArubaOS
Details
Interpretaties
Voor succesvol misbruik moet de kwaadwillende toegang hebben tot de management interface (PAPI-poort). Het is goed gebruik deze interface niet publiek toegankelijk te hebben, maar af te steunen in een separaat beheer-LAN
Oplossingen
Aruba Networks heeft updates uitgebracht om de kwetsbaarheden te verhelpen in ArubaOS 10.6.0.0, 10.5.1.1 en 10.4.1.1. Zie bijgevoegde referentie voor meer informatie:
Vulnerabilities 18
-
Critical 9.8
Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful e…
-
Critical 9.8
Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful e…
-
Critical 9.8
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthent…
-
Critical 9.8
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthent…
-
Critical 9.8
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that cou…
-
Critical 9.8
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthen…
-
Critical 9.8
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated…
-
Critical 9.8
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticate…
-
High 8.2
There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management …
-
High 8.2
There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's acces…
-
High 7.2
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation o…
-
High 7.2
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation o…
-
Medium 5.3
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI pro…
-
Medium 5.3
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PA…
-
Medium 5.3
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Succes…
-
Medium 5.3
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Succes…
-
Medium 5.3
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI p…
-
Medium 4.9
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protoco…
Revision history
-
#0
Initiele versie
References
-
Reference - nvd
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt