PT-2024-3316 · Aruba · Arubaos

Chancen

·

Published

2024-04-30

·

Updated

2024-07-03

·

CVE-2024-26305

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ArubaOS versions 8.10 through 10.5
Description The issue is related to a buffer overflow vulnerability in the Utility daemon, which could lead to unauthenticated remote code execution by sending specially crafted packets to the PAPI UDP port 8211. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Recommendations For ArubaOS versions 8.10 through 10.5, upgrade ArubaOS to a patched version to resolve the issue. As a temporary workaround, consider restricting access to the PAPI UDP port 8211 to minimize the risk of exploitation.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121CWE-120

Related Identifiers

BDU:2024-03552
CVE-2024-26305

Affected Products

Arubaos