CVE-2024-26304criticalCWE-121

CVE-2024-26304: critical vulnerability in Hewlett Packard Enterprise (HPE) Aruba…

Published · Updated

Follow this CVE+ Monitor Aruba Mobility Conductor; Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

60Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.8epss 44%
from disclosure to weapon157 days
Published on NVDMay 1
1st PoC+157d
In short

A buffer overflow flaw in Aruba's access point management service allows attackers to send specially crafted network packets to a specific UDP port, potentially executing malicious code on the device without authentication.

Technical detail

Buffer overflow vulnerability in the L2/L3 Management service exposed via the PAPI protocol on UDP port 8211 allows unauthenticated remote attackers to achieve arbitrary code execution with privileged privileges; exploitation requires sending specially crafted packets that overflow memory boundaries, enabling OS-level command execution.

Summary generated and translated by AI from the official description.
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Hewlett Packard Enterprise (HPE) Aruba…

In the same product, most dangerous first.

CVE-2024-26305CRITICALCVE-2024-26305EPSS 15.2%CVE-2024-33512CRITICALCVE-2024-33512EPSS 14.6%CVE-2024-33511CRITICALCVE-2024-33511EPSS 14.6%CVE-2023-22750CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22749CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22748CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%