9.8

CVE-2024-26305

Warnung
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arubanetworks ≫ Sd-wan Version 8.6.0.4-2.2.0.0
Arubanetworks ≫ Sd-wan Version 8.6.0.4-2.2.0.7
Arubanetworks ≫ Sd-wan Version 8.7.0.0-2.3.0.0
Arubanetworks ≫ Sd-wan Version 8.7.0.0-2.3.0.9
Arubanetworks ≫ Arubaos Version >= 6.5.4.0 < 8.10.0.12
Arubanetworks ≫ Arubaos Version >= 8.11.0.0 < 8.11.2.2
Arubanetworks ≫ Arubaos Version >= 10.4.0.0 < 10.4.1.1
Arubanetworks ≫ Arubaos Version >= 10.5.0.0 < 10.5.1.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.16% 0.963
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HPE 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt
Broken Link