PT-2015-5227 · Aruba · Aruba Instant

Publicado 2015-02-03 · Atualizado 2015-02-04 · CVE-2015-1348

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Aruba Instant (IAP) versions prior to 4.0.0.7 Aruba Instant (IAP) versions 4.1.x prior to 4.1.1.2

Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service, potentially leading to a crash or reset to factory default, by sending a malformed frame to the wireless interface.

Recommendations For Aruba Instant (IAP) versions prior to 4.0.0.7, update to version 4.0.0.7 or later. For Aruba Instant (IAP) versions 4.1.x prior to 4.1.1.2, update to version 4.1.1.2 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-1348

Produtos afetados

Aruba Instant

Referências · 2

• http://arubanetworks.com/support/alerts/aruba-psa-2015-001.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1348 · Nota de Segurança