Siemens SCALANCE W1750D Buffer Overflow (CVE-2023-22784)

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities...

CVE-2023-22784

creationtimestamp| type| source ---|---|--- 2023-05-08 18:37:52+00:00| seen| https://t.me/cibsecurity/63438 2023-05-10 13:22:06+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-arubaos-und-aruba-instantos-updates-verfugbar...

CVE-2023-22784

CVE-2023-22784 describes unauthenticated buffer overflow vulnerabilities in Aruba’s PAPI-enabled services exposed via UDP port 8211, leading to remote code execution as a privileged OS user. The issue arises from buffer copy without proper size checking in multiple underlying services. Documented...