CVE-2024-33512

A buffer overflow flaw in Aruba's Local User Authentication Database service allows attackers to send specially crafted packets to a specific network port and execute malicious code on the system without needing valid credentials. This is a critical vulnerability because it gives attackers complete control over the affected device.

A stack-based buffer overflow (CWE-121) exists in the PAPI UDP service (port 8211) of Aruba's Local User Authentication Database. Unauthenticated remote attackers can trigger the overflow by sending malformed packets, achieving arbitrary code execution with elevated privileges. Pre-condition: PAPI service must be accessible over the network; successful exploitation grants privileged OS-level code execution.