NanoSSL Code Execution

The vulnerability of the NanoSSL microprogramming software library used in Aruba 5400R, Aruba 3810, Aruba 2920, Aruba 2930F, Aruba 2930M, Aruba 2530, and Aruba 2540 switches is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute...

NanoSSL Code Execution

The vulnerability of the NanoSSL library software for ERS3500, ERS3600, ERS4900, and ERS5900 switches is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted POST request...

NanoSSL Code Execution

The vulnerability of the NanoSSL library software for ERS3500, ERS3600, ERS4900, and ERS5900 switches is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted POST request...

Critical TLStorm 2.0 Bugs Affect Widely-Used Aruba and Avaya Network Switches

Cybersecurity researchers have detailed as many as five severe security flaws in the implementation of TLS protocol in several models of Aruba and Avaya network switches that could be abused to gain remote access to enterprise networks and steal valuable information. The findings follow the March...

PT-2022-2388

Name of the Vulnerable Software and Affected Versions Avaya ERS3500, ERS3600, ERS4900, ERS5900 affected versions not specified Description The issue is caused by a buffer overflow in the dynamic memory of the NanoSSL library. It may allow a remote attacker to execute arbitrary code using a...

Avaya switch security vulnerabilities

Avaya switches is a switch from the French company Avaya. A security vulnerability exists in Avaya switches that originates from a process on the web server that handles POST requests not properly validating NanoSSL return values. A remote attacker could use this vulnerability to pass specially...

PT-2022-2382

Name of the Vulnerable Software and Affected Versions ArubaOS-Switch versions 15.xx.xxxx through 16.11.xxxx: ArubaOS-Switch 16.02.xxxx versions K.16.02.0033 and below ArubaOS-Switch 16.08.xxxx versions KB/WB/WC/YA/YB/YC.16.08.0024 and below ArubaOS-Switch 16.09.xxxx versions...

PT-2022-2384

Name of the Vulnerable Software and Affected Versions Avaya ERS3500, ERS3600, ERS4900, ERS5900 affected versions not specified Description The issue is caused by a buffer overflow in the dynamic memory of the NanoSSL library. It may allow a remote attacker to execute arbitrary code using a...

Vulnerabilities fixed in switches from Avaya and Aruba Networks

Researchers at cybersecurity firm Armis have discovered vulnerabilities discovered in implementations of the NanoSSL library. Armis has discovered that in certain network equipment from Aruba and Avaya error messages are not properly processed causing security problems. Previously, Armis has foun...

Avaya switch buffer error vulnerability

Avaya switches is a switch from Avaya France. A buffer error vulnerability exists in Avaya switches that stems from incorrect input validation in the NanoSSL library. A remote attacker could exploit this vulnerability to execute arbitrary code on the target system...