Arubanetworks Arubaos vulnerabilities

CVE-2017-14491 [CRITICAL] CWE-787 CVE-2017-14491: Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of servi Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

CVE-2024-31473 [CRITICAL] CWE-78 CVE-2024-31473: There is a command injection vulnerability in the underlying deauthentication service that could lea There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary

CVE-2023-45615 [CRITICAL] CWE-120 CVE-2023-45615: There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthent There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a

CVE-2023-45614 [CRITICAL] CWE-120 CVE-2023-45614: There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthent There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a

CVE-2024-31472 [CRITICAL] CWE-78 CVE-2024-31472: There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrar

CVE-2024-31471 [CRITICAL] CWE-78 CVE-2024-31471: There is a command injection vulnerability in the underlying Central Communications service that cou There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arb

CVE-2023-22749 [CRITICAL] CWE-77 CVE-2023-22749: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged use

CVE-2023-22750 [CRITICAL] CWE-77 CVE-2023-22750: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged use

CVE-2023-22747 [CRITICAL] CWE-77 CVE-2023-22747: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged use

CVE-2023-22748 [CRITICAL] CWE-77 CVE-2023-22748: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged use

CVE-2023-35980 [CRITICAL] CWE-120 CVE-2023-35980: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as

CVE-2023-35982 [CRITICAL] CWE-120 CVE-2023-35982: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as

CVE-2023-35981 [CRITICAL] CWE-120 CVE-2023-35981: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthe There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as

CVE-2024-31470 [CRITICAL] CWE-121 CVE-2024-31470: There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equal There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ab

CVE-2020-24633 [CRITICAL] CWE-120 CVE-2020-24633: There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code ex There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Cont

CVE-2023-45616 [CRITICAL] CWE-120 CVE-2023-45616: There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary co

CVE-2022-37897 [CRITICAL] CWE-78 CVE-2022-37897: There is a command injection vulnerability that could lead to unauthenticated remote code execution There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying op

CVE-2024-31467 [CRITICAL] CWE-121 CVE-2024-31467: There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthent There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a

CVE-2024-31466 [CRITICAL] CWE-121 CVE-2024-31466: There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthent There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a

CVE-2024-31469 [CRITICAL] CWE-121 CVE-2024-31469: There are buffer overflow vulnerabilities in the underlying Central Communications service that coul There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute a