Back

CVE-2024-33512

May 1, 2024, 7:50 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Aruba Access Point

Aruba Local User Authentication Database service

Source

security-alert@hpe.com

Tags

2024-05-01
security-alert@hpe.com
CVE-2024-33512

CVE-2024-33512 details

Published : May 1, 2024, 3:15 p.m.
Last Modified : May 1, 2024, 7:50 p.m.

Description

There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

CVSS Score

1 2 3 4 5 6 7 8 9.8 10

Weakness

Weakness Name Description

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

9.8

Exploitability Score

Impact Score

Base Severity

CRITICAL

Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL Source
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt security-alert@hpe.com
This website uses the NVD API, but is not approved or certified by it.