PT-2018-1870 · Aruba+1 · Aruba Access Point+1

Published 2018-07-09 · Updated 2020-08-24 · CVE-2018-7080

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Texas Instruments Bluetooth Low Energy versions (affected versions not specified) Aruba Access points (affected versions not specified)

Description The issue is caused by a repeated memory release in the OAD mechanism of Texas Instruments Bluetooth Low Energy microcontroller firmware. An attacker could exploit this to gain full control over the device. For Aruba Access points, the vulnerability exists in the firmware of embedded BLE radios and could allow an attacker to install malicious firmware and gain access to the console port if the BLE radio is enabled.

Recommendations For Texas Instruments Bluetooth Low Energy, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Aruba Access points, consider disabling the BLE radio to minimize the risk of exploitation, as it is disabled by default.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2018-01472

CVE-2018-7080

Affected Products

Aruba Access Point

Texas Instruments Bluetooth Low Energy

References · 6

• https://osv.dev/vulnerability/CVE-2018-7080 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01472 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-7080 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2018-006.txt · Vendor Advisory
• http://securityfocus.com/bid/105814 · Note
• https://xakep.ru/2018/11/02/bleedingbit · Note