CVE-2024-33511criticalCWE-121

CVE-2024-33511: critical vulnerability in Hewlett Packard Enterprise (HPE) Aruba…

Published · Updated

Follow this CVE+ Monitor Aruba Mobility Conductor; Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 15%
In short

A buffer overflow flaw in Aruba's Automatic Reporting service allows attackers to send specially crafted packets to UDP port 8211 and execute arbitrary code on the system without needing to log in, potentially compromising the entire device.

Technical detail

A stack-based buffer overflow exists in the PAPI (Automatic Reporting service) UDP listener on port 8211, exploitable via unauthenticated remote packet transmission without authentication requirements. Successful exploitation grants arbitrary code execution with elevated privileges on the underlying OS, bypassing all access controls.

Summary generated and translated by AI from the official description.
There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Related CVEs — Hewlett Packard Enterprise (HPE) Aruba…

In the same product, most dangerous first.

CVE-2024-26304CRITICALCVE-2024-26304EPSS 44.3%CVE-2024-26305CRITICALCVE-2024-26305EPSS 15.2%CVE-2024-33512CRITICALCVE-2024-33512EPSS 14.6%CVE-2023-22750CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22749CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22748CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%