PT-2019-11081 · Aruba · Arubaos

Published 2019-09-04 · Updated 2019-09-16 · CVE-2018-7081

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ArubaOS (affected versions not specified)

Description: A remote code execution issue is present in network-listening components. An attacker could exploit this by transmitting specially-crafted IP traffic to a mobility controller, potentially causing a process crash or executing arbitrary code with full system privileges, leading to complete system compromise. The attack requires the ability to transmit traffic to an IP interface on the mobility controller and leverages the PAPI protocol (UDP port 8211). If the mobility controller only bridges L2 traffic and does not have an accessible IP address, it cannot be attacked.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-7081

Affected Products

Arubaos

References · 6

• 🔥 https://x-c3ll.github.io/posts/CVE-2018-7081-RCE-ArubaOS · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7081 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7081 · Vendor Advisory
• https://t.me/rnetsec/10345 · Telegram Post
• https://t.me/defcon_news/23826 · Telegram Post