CVE-2018-7080

🗓️ 07 Dec 2018 21:00:00Reported by hpeType

Vulnerability in Aruba Access Points' embedded BLE radios firmware allows installation of malicious firmware and unauthorized access to console port

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the OAD update mechanism of Texas Instruments’ microprogrammable microcontrollers’ Bluetooth Low Energy technology allows a intruder to gain full control over the device.	13 Dec 201800:00	–	bdu_fstec
Circl	CVE-2018-7080	7 Nov 201810:23	–	circl
Cvelist	CVE-2018-7080	7 Dec 201821:00	–	cvelist
EUVD	EUVD-2018-18823	7 Oct 202500:30	–	euvd
NVD	CVE-2018-7080	7 Dec 201821:29	–	nvd
OSV	CVE-2018-7080	7 Dec 201821:29	–	osv
Prion	Design/Logic Flaw	7 Dec 201821:29	–	prion
The Hacker News	Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks	1 Nov 201818:27	–	thn
The Hacker News	Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks	1 Nov 201818:27	–	thn
ThreatPost	RSA Conference 2019: BleedingBit Flaws Continue to Plague Firms	6 Mar 201921:30	–	threatpost

NVD

Node

arubanetworks arubaosRange6.4.4.0–6.4.4.20

arubanetworks arubaosRange6.5.3.0–6.5.3.9

arubanetworks arubaosRange6.5.4.0–6.5.4.9

arubanetworks arubaosRange8.0.0.0–8.2.2.2

arubanetworks arubaosRange8.3.0.0–8.3.0.4

Node

arubanetworks 203rp_firmwareMatch-

AND

arubanetworks 203rpMatch-

Node

arubanetworks 203r_firmwareMatch-

AND

arubanetworks 203rMatch-

Node

arubanetworks ap-300_series_access_points_firmwareMatch-

AND

arubanetworks ap-300_series_access_pointsMatch-

Node

arubanetworks ap-300_series_instant_access_points_firmwareMatch-

AND

arubanetworks ap-300_series_instant_access_pointsMatch-

[
  {
    "product": "Aruba Access Points",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "AP-3xx and IAP-3xx series access points, AP-203R, AP-203RP, ArubaOS 6.4.4.x prior to 6.4.4.20, ArubaOS 6.5.3.x prior to 6.5.3.9, ArubaOS 6.5.4.x prior to 6.5.4.9, ArubaOS 8.x prior to 8.2.2.2, ArubaOS 8.3.x prior to 8.3.0.4"
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-006.txt
securityfocus	www.securityfocus.com/bid/105814

17 Jun 2026 02:02Current

7.9High risk

Vulners AI Score7.9

CVSS 25.4

CVSS 37.5

EPSS0.00639