CVE-2023-22748: Improper Neutralization of Special Elements used in a Command

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

CVE-2023-22747: Improper Neutralization of Special Elements used in a Command

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

PT-2023-1678 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in multiple underlying operating system processes. These vulnerabilities could lead to unauthenticated remote code execution by sendi...

PT-2023-1675 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS versions affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the implementation of the PAPI protocol in ArubaOS. This vulnerability can be exploited by sending specially crafted...

PT-2023-1908

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue is related to the implementation of the PAPI network protocol in ArubaOS, which lacks proper data sanitization at the management level. This can be exploited by a remote attacker to...

PT-2023-1913

Name of the Vulnerable Software and Affected Versions Aruba Networks affected versions not specified Description The issue is related to stack-based buffer overflow vulnerabilities in the implementation of the PAPI protocol, which could lead to unauthenticated remote code execution. This can be...

CVE-2023-22752: Out-of-bounds Write

There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

CVE-2023-22751: Out-of-bounds Write

There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

CVE-2023-22749: Improper Neutralization of Special Elements used in a Command

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

CVE-2023-22757: Buffer Copy without Checking Size of Input

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute...

CVE-2023-22756: Buffer Copy without Checking Size of Input

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute...

CVE-2023-22755: Buffer Copy without Checking Size of Input

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute...

PT-2023-1909

Name of the Vulnerable Software and Affected Versions ArubaOS versions affected versions not specified Description The issue is related to the implementation of the PAPI network protocol in ArubaOS, which fails to properly sanitize data at the management level. This can be exploited by a remote...

PT-2023-1676 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS versions affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in multiple underlying operating system processes. These vulnerabilities could lead to unauthenticated remote code execution...

CVE-2023-22753: Buffer Copy without Checking Size of Input

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute...

CVE-2023-22750: Improper Neutralization of Special Elements used in a Command

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

PT-2023-1679 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS versions affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in multiple underlying operating system processes. These vulnerabilities could lead to unauthenticated remote code execution...

PT-2023-1911

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue is related to the implementation of the PAPI protocol in ArubaOS, which lacks proper data sanitization at the management level. This can be exploited by sending specially crafted...

CVE-2022-37897

There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of this vulnerability results in the ability to execute...

Command injection

There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of this vulnerability results in the ability to execute...