CVE-2018-7083

published 2019-05-10

CVE-2018-7083: If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed. It was discovered that core dumps are stored in a way that unauthenticated users can access them through the Aruba Instant web interface. Core dumps could contain sensitive information such as keys and passwords. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0

Affected

4 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	aruba_instant	>= 4.0 < 4.2.4.12	4.2.4.12
arubanetworks	aruba_instant	>= 6.5.0 < 6.5.4.11	6.5.4.11
arubanetworks	aruba_instant	>= 8.3.0 < 8.3.0.6	8.3.0.6
siemens	scalance_w1750d_firmware	< 8.4.0.1	8.4.0.1

CWE-200