CVE-2009-3836

2009-11-0215:00:00

mitre

www.cve.org

arubaos 3.3.1.x

arubaos 3.3.2.x

aruba rn 3.1.x

aruba rn 3.4.x

aruba mobility controller

denial of service

access point crash

802.11 association request

AI Score

6.6

Confidence

High

EPSS

0.005

Percentile

76.7%

JSON

ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame.

References

secunia.com/advisories/37085

www.arubanetworks.com/support/alerts/aid-102609.asc

www.securityfocus.com/bid/36832

www.vupen.com/english/advisories/2009/3051