CVE-2018-7080

🗓️ 07 Dec 2018 21:00:00Reported by hpeType

Vulnerability in Aruba Access Points' embedded BLE radios firmware allows installation of malicious firmware and unauthorized access to console port

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2018-7080	7 Nov 201810:23	–	circl
Cvelist	CVE-2018-7080	7 Dec 201821:00	–	cvelist
EUVD	EUVD-2018-18823	7 Oct 202500:30	–	euvd
NVD	CVE-2018-7080	7 Dec 201821:29	–	nvd
OSV	CVE-2018-7080	7 Dec 201821:29	–	osv
Prion	Design/Logic Flaw	7 Dec 201821:29	–	prion
The Hacker News	Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks	1 Nov 201818:27	–	thn
The Hacker News	Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks	1 Nov 201818:27	–	thn
ThreatPost	RSA Conference 2019: BleedingBit Flaws Continue to Plague Firms	6 Mar 201921:30	–	threatpost
ThreatPost	Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack	1 Nov 201815:20	–	threatpost

NVD

Node

arubanetworks arubaosRange6.4.4.0–6.4.4.20

arubanetworks arubaosRange6.5.3.0–6.5.3.9

arubanetworks arubaosRange6.5.4.0–6.5.4.9

arubanetworks arubaosRange8.0.0.0–8.2.2.2

arubanetworks arubaosRange8.3.0.0–8.3.0.4

Node

arubanetworks 203rp_firmwareMatch-

AND

arubanetworks 203rpMatch-

Node

arubanetworks 203r_firmwareMatch-

AND

arubanetworks 203rMatch-

Node

arubanetworks ap-300_series_access_points_firmwareMatch-

AND

arubanetworks ap-300_series_access_pointsMatch-

Node

arubanetworks ap-300_series_instant_access_points_firmwareMatch-

AND

arubanetworks ap-300_series_instant_access_pointsMatch-

[
  {
    "product": "Aruba Access Points",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "AP-3xx and IAP-3xx series access points, AP-203R, AP-203RP, ArubaOS 6.4.4.x prior to 6.4.4.20, ArubaOS 6.5.3.x prior to 6.5.3.9, ArubaOS 6.5.4.x prior to 6.5.4.9, ArubaOS 8.x prior to 8.2.2.2, ArubaOS 8.3.x prior to 8.3.0.4"
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-006.txt
securityfocus	www.securityfocus.com/bid/105814

21 Nov 2024 04:11Current

7.9High risk

Vulners AI Score7.9

CVSS 25.4

CVSS 37.5

EPSS0.0024