CVE-2024-26305criticalCWE-121

CVE-2024-26305: critical vulnerability in Hewlett Packard Enterprise (HPE) Aruba…

Published · Updated

Follow this CVE+ Monitor Aruba Mobility Conductor; Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 15%
In short

A buffer overflow flaw in Aruba's access point management protocol allows attackers to send malicious packets to a network port and take complete control of the device by running harmful code with system privileges. This can happen without needing any login credentials.

Technical detail

Buffer overflow in the Utility daemon's PAPI UDP service (port 8211) permits unauthenticated remote code execution. The vulnerability is triggered via specially crafted packets that overflow memory buffers, enabling arbitrary code execution with elevated privileges on the underlying OS.

Summary generated and translated by AI from the official description.
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Related CVEs — Hewlett Packard Enterprise (HPE) Aruba…

In the same product, most dangerous first.

CVE-2024-26304CRITICALCVE-2024-26304EPSS 44.3%CVE-2024-33512CRITICALCVE-2024-33512EPSS 14.6%CVE-2024-33511CRITICALCVE-2024-33511EPSS 14.6%CVE-2023-22750CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22749CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22748CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%