CVE-2023-35979

EPSS 0.17%
Veröffentlicht 05.07.2023 15:15:09
Zuletzt bearbeitet 21.11.2024 08:09:06
Quelle security-alert@hpe.com
CVE-Watchlists
Login
Unerledigt
Login

Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface

There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Arubanetworks ≫ Arubaos Version >= 6.5.4.0 < 8.6.0.21

   Arubanetworks ≫ Mc-va-10 Version-
   Arubanetworks ≫ Mc-va-1k Version-
   Arubanetworks ≫ Mc-va-250 Version-
   Arubanetworks ≫ Mc-va-50 Version-
   Arubanetworks ≫ Mcr-va-10k Version-
   Arubanetworks ≫ Mcr-va-1k Version-
   Arubanetworks ≫ Mcr-va-50 Version-
   Arubanetworks ≫ Mcr-va-500 Version-
   Arubanetworks ≫ Mcr-va-5k Version-
   Arubanetworks ≫ Sd-wan Version-
   Arubanetworks ≫ Mcr-hw-10k Version-
   Arubanetworks ≫ Mcr-hw-1k Version-
   Arubanetworks ≫ Mcr-hw-5k Version-

Arubanetworks ≫ Arubaos Version >= 8.7.0.0 < 8.10.0.7

Arubanetworks ≫ Arubaos Version >= 8.11.0.0 < 8.11.1.1

Arubanetworks ≫ Arubaos Version >= 10.4.0.0 < 10.4.0.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.17%	0.38

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
security-alert@hpe.com	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-008.txt

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-35979

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-35979

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-35979

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-35979