CVEvulnerability

CVE-2020-24633

9.8 CRITICAL Published 2020-12-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.

Affected configurations

• arubanetworks arubaos (< 6.4.4.24) • arubanetworks arubaos (>= 6.5.0.0 < 6.5.4.18) • arubanetworks arubaos (>= 8.0.0.0 < 8.2.2.10) • arubanetworks arubaos (>= 8.3.0.0 < 8.3.0.14) • arubanetworks arubaos (>= 8.4.0.0 < 8.5.0.11) • arubanetworks arubaos (>= 8.6.0.0 < 8.6.0.6) • arubanetworks arubaos (>= 8.7.0.0 < 8.7.1.0) • arubanetworks sd-wan (< 2.1.0.2) • arubanetworks sd-wan (>= 2.2.0.0 < 2.2.0.1)

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References