PT-2017-3743 · Aruba · Arubaos
Published
2017-10-11
·
Updated
2018-10-18
·
CVE-2017-9000
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
ArubaOS versions prior to 6.3.1.25
ArubaOS version 6.4 prior to 6.4.4.16
ArubaOS versions 6.5.x prior to 6.5.1.9
ArubaOS version 6.5.2
ArubaOS version 6.5.3 prior to 6.5.3.3
ArubaOS version 6.5.4 prior to 6.5.4.2
ArubaOS versions 8.x prior to 8.1.0.4
Description:
The issue is related to insufficient access control, allowing an unauthenticated user with network access to an Aruba mobility controller to access arbitrary files stored on the mobility controller. This can be done using TCP ports 8080 or 8081, which are used for captive portal functionality and are listening on all IP interfaces of the mobility controller by default. An attacker could access files containing passwords, keys, and other sensitive information, potentially leading to full system compromise.
Recommendations:
For ArubaOS versions prior to 6.3.1.25, update to version 6.3.1.25 or later.
For ArubaOS version 6.4 prior to 6.4.4.16, update to version 6.4.4.16 or later.
For ArubaOS versions 6.5.x prior to 6.5.1.9, update to version 6.5.1.9 or later.
For ArubaOS version 6.5.2, update to a later version.
For ArubaOS version 6.5.3 prior to 6.5.3.3, update to version 6.5.3.3 or later.
For ArubaOS version 6.5.4 prior to 6.5.4.2, update to version 6.5.4.2 or later.
For ArubaOS versions 8.x prior to 8.1.0.4, update to version 8.1.0.4 or later.
As a temporary workaround, consider restricting access to TCP ports 8080 and 8081 to minimize the risk of exploitation.
Fix
Improper Access Control
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Arubaos