CVE-2023-45614

Summary of CVE-2023-45614 (Aruba/PAPI) Affected: Aruba devices exposing the PAPI (Aruba Access Point Management Protocol) over UDP port 8211. Vulnerability: Buffer overflow in the underlying CLI service.-Impact: Unauthenticated remote code execution with arbitrary code execution as a privileged O...

CVE-2023-45615

CVE-2023-45615 describes buffer overflow vulnerabilities in the underlying CLI service of Aruba’s PAPI (Aruba’s access point management protocol) that can be exploited by sending specially crafted UDP packets to port 8211. Successful exploitation leads to unauthenticated remote code execution as ...

CVE-2023-22779

Summary (CVE-2023-22779): The vulnerability is a buffer-overflow in Aruba/PAPI handling that enables unauthenticated remote code execution via specially crafted UDP packets to port 8211. Affected software includes ArubaOS/InstantOS (Aruba management stack) with potential execution of code as a pr...

CVE-2023-45617

CVE-2023-45617 affects Aruba’s PAPI CLI service on Aruba access points. The Red Hat documentation corroborates that there are arbitrary file deletion vulnerabilities in the CLI service accessed via PAPI, and exploitation could allow deletion of arbitrary files on the underlying operating system, ...

CVE-2023-45626

CVE-2023-45626 is described in the initial record as an authenticated vulnerability that allows highly privileged, persistent arbitrary code execution across boot cycles. Connected documents confirm the description but do not provide concrete technical details such as affected product/vendor/vers...

CVE-2023-22790

CVE-2023-22790 is part of a set of authenticated command-injection flaws affecting Aruba InstantOS and ArubaOS 10 CLI. The connected documents identify multiple CVEs (including 22788–22791) describing that an attacker with valid credentials can execute arbitrary commands as a privileged user on t...

CVE-2023-35980

CVE-2023-35980 covers buffer overflow vulnerabilities in Aruba Networks ArubaOS/InstantOS components accessible via the PAPI UDP port 8211, enabling unauthenticated remote code execution as a privileged OS user. Connected sources confirm the flaw is a classic buffer overflow (CWE-120) in multiple...

CVE-2023-45621

The CVE-2023-45621 entry describes unauthenticated Denial-of-Service in the CLI service accessed via the PAPI protocol, affecting Aruba access points. Exploitation interrupts normal operation of the affected device. The Red Hat advisory mirrors the same description. No public technical details be...

CVE-2024-42393

Technical details for CVE-2024-42393 are not publicly available in the provided documents. Monitor for updates from NVD/CVE and vendor advisories.

CVE-2023-22787

CVE-2023-22787 describes an unauthenticated Denial of Service in the PAPI service of Aruba InstantOS/ArubaOS 10. Exploitation interrupts normal operation of the affected access point. Connected sources also reference related Aruba PSA advisories and vendor updates (v8.10.0.6) as remediation; broa...

CVE-2023-45618

CVE-2023-45618 describes arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba AP management protocol). Exploitation could allow deleting arbitrary files on the underlying OS, potentially interrupting normal operation and affecting AP integrity. The documen...

CVE-2023-45624

CVE-2023-45624 is an unauthenticated Denial-of-Service affecting the soft ap daemon accessible via the PAPI protocol. The Red Hat cve entry confirms the DoS effect: exploitation interrupts normal operation of the affected access point. No concrete vulnerability details (vendor, product version, a...

CVE-2024-42399

CVE-2024-42399 corresponds to multiple unauthenticated DoS vulnerabilities in the Soft AP daemon accessed via the PAPI protocol on Aruba Networks devices (ArubaOS/InstantOS). Exploitation is network-based with no authentication and can interrupt normal AP operation, per NVD/Aruba advisories. The ...

CVE-2023-22789

CVE-2023-22789 affects Aruba InstantOS and ArubaOS 10 CLI. Multiple authenticated command-injection vulnerabilities allow an attacker with valid credentials to execute arbitrary commands as a privileged OS user. Connected sources also describe related CVEs (22787–22791) affecting the same Aruba p...

CVE-2023-22782

CVE-2023-22782 describes unauthenticated remote code execution via buffer overflow vulnerabilities in multiple Aruba PAPI-protocol services (UDP port 8211). The issues affect ArubaOS/InstantOS deployments and are echoed in Siemens SCALANCE W1750D advisories, reflecting a common root cause of unch...

CVE-2023-22784

CVE-2023-22784 describes unauthenticated buffer overflow vulnerabilities in Aruba’s PAPI-enabled services exposed via UDP port 8211, leading to remote code execution as a privileged OS user. The issue arises from buffer copy without proper size checking in multiple underlying services. Documented...

CVE-2023-22788

CVE-2023-22788 involves multiple authenticated command injection vulnerabilities in the Aruba InstantOS and ArubaOS 10 command line interface. The underlying issue allows an attacker with authenticated access to execute arbitrary commands as a privileged user on the underlying OS. Affected stack ...

CVE-2023-35982

CVE-2023-35982 describes a buffer overflow vulnerability that enables unauthenticated remote code execution via crafted packets to the PAPI UDP port 8211. Documented impact is arbitrary code execution as a privileged user on the underlying OS. Reported affected products/contexts include Siemens S...

CVE-2023-22780

CVE-2023-22780 describes buffer overflow vulnerabilities in Aruba PAPI (UDP 8211) components across ArubaOS/InstantOS that enable unauthenticated remote code execution with privileges on the underlying OS. Multiple connected sources corroborate the same vulnerability pattern and affected products...

CVE-2023-35981

CVE-2023-35981 affects Aruba Networks ArubaOS/InstantOS. It describes buffer overflow vulnerabilities in multiple underlying services that can lead to unauthenticated remote code execution by sending crafted packets to the PAPI UDP port 8211. The CVSS v3.1 base score is 9.8 (NETWORK, LOW attack c...

CVE-2023-45627

Technical details about CVE-2023-45627 are not publicly provided in the supplied documents. No specific affected products, root cause, impact, or fixes are described; monitor for updates.

CVE-2023-22791

CVE-2023-22791 affects Aruba InstantOS and ArubaOS 10, where an edge-case combination of network configuration and WLAN environment with an attacker who has valid credentials can disclose potentially sensitive information over the WLAN. The vulnerability is documented across multiple sources (NVD...

CVE-2023-45616

CVE-2023-45616 describes a buffer overflow in the AirWave client service that can lead to unauthenticated remote code execution by sending specially crafted packets to the PAPI UDP port 8211. Successful exploitation allows arbitrary code execution as a privileged user on the underlying OS. The Re...

CVE-2023-45619

CVE-2023-45619 affects Aruba networks: the RSSI service (PAPI) on Aruba access points contains an arbitrary file deletion vulnerability. Successful exploitation allows deletion of arbitrary files on the underlying OS, which could interrupt normal operation and impact the device’s integrity. Conne...

CVE-2023-45620

CVE-2023-45620 (Siemens Scalance W1750D/ Aruba PAPI context) is an unauthenticated DoS vulnerability in the CLI service accessed via the PAPI protocol, allowing interruption of normal operation on affected APs. Connected documents confirm the issue is triggered over the PAPI UDP path and leads to...

CVE-2023-45622

CVE-2023-45622 affects Aruba/Aruba_APs with unauthenticated DoS in the BLE daemon accessed via PAPI. The vulnerability, rated CVSS v3.1 base score 7.5 (HIGH), allows an attacker to interrupt normal operation of the affected access point without authentication. The provided documents do not detail...

CVE-2023-22781

CVE-2023-22781 corresponds to buffer overflow vulnerabilities in ArubaOS/InstantOS services accessible via the PAPI UDP port 8211, permitting unauthenticated remote code execution as a privileged OS user. Multiple connected sources (NVD, Tenable ISA, CISA/ICS advisories, and CSAF entries) describ...

CVE-2024-42395

CVE-2024-42395 describes an unauthenticated remote code execution in the AP Certificate Management Service . Exploitation could allow an attacker to run arbitrary commands on the underlying OS, potentially leading to complete system compromise. The CVSS metrics indicate a network-based , no-authe...

CVE-2023-45625

CVE-2023-45625 involves multiple authenticated command injection vulnerabilities in the command line interface, enabling execution of arbitrary commands as a privileged user on the underlying OS. The Red Hat advisory RH:CVE-2023-45625 corroborates the description. The Aruba PSA alert is reference...

CVE-2023-22783

CVE-2023-22783 describes buffer overflow flaws in Aruba PAPI-related services (UDP port 8211) that can lead to unauthenticated remote code execution as a privileged OS user. Connected sources reference ArubaOS/InstantOS contexts and note multiple interconnected CVEs (including 22779–2287x) with b...

CVE-2024-31469

The CVE-2024-31469 issue affects Aruba’s Central Communications service (PAPI UDP port 8211) and enables buffer overflow conditions that could allow unauthenticated remote code execution, resulting in arbitrary code execution as a privileged OS user. Available connected documents confirm the unde...

CVE-2024-42398

CVE-2024-42398 concerns Aruba Networks Access Points running ArubaOS/InstantOS where the Soft AP daemon (PAPI) is vulnerable to multiple unauthenticated DoS conditions. Exploitation interrupts normal AP operation. The issue is corroborated by multiple sources (NVD entry, Aruba/Nessus plugin) and ...

CVE-2023-22785

CVE-2023-22785 describes unauthenticated buffer-overflow vulnerabilities in ArubaOS/Aruba InstantOS exposed via the PAPI UDP port 8211. The underlying issue allows remote code execution as a privileged OS user if malicious packets are sent to the PAPI service. Siemens’ PT/Aruba PSA materials indi...

CVE-2023-45623

CVE-2023-45623 is an unauthenticated Denial-of-Service affecting the Wi-Fi Uplink service over the PAPI protocol. The issue, described in Red Hat/ENISA/ARUBA-aligned sources, enables interrupting normal operation of the affected access point and has a CVSS v3.1 base score of 7.5 ( NETWORK, LOW co...

CVE-2023-22786

CVE-2023-22786 describes buffer overflow vulnerabilities in ArubaOS/InstantOS services that can allow unauthenticated remote code execution by sending specially crafted packets to the PAPI UDP port 8211. Exploitation would grant arbitrary code execution as a privileged user on the underlying OS. ...

CVE-2024-31470

CVE-2024-31470 describes a buffer overflow in Aruba SAE service accessible via PAPI UDP port 8211, enabling unauthenticated remote code execution with SYSTEM-level privileges on ArubaOS/InstantOS. Affected components include the SAE service and related PAPI protocol handling within ArubaOS (Aruba...

CVE-2024-42396

CVE-2024-42396 describes unauthenticated DoS vulnerabilities in the AP Certificate Management daemon accessible via the PAPI protocol. Affected products are ArubaOS and InstantOS (Aruba Networks). The root cause is exposure of the AP Certificate Management service over PAPI, enabling interruption...

CVE-2024-31466

CVE-2024-31466 describes unauthenticated buffer-overflow vulnerabilities in the PAPI CLI service used by ArubaOS/InstantOS, exploitable by sending specially crafted UDP packets to port 8211. Successful exploitation could execute arbitrary code with OS privileges. Affected products include ArubaOS...

CVE-2024-31468

CVE-2024-31468 impacts ArubaOS/Aruba InstantOS Central Communications Service. A buffer overflow in the PAPI UDP port 8211 allows unauthenticated remote code execution, enabling arbitrary code as a privileged OS user. Affected product class is Aruba Central/ArubaOS components handling the Central...

CVE-2024-42397

CVE-2024-42397 describes unauthenticated DoS vulnerabilities in the AP Certificate Management daemon over PAPI on Aruba Networks’ InstantOS/ArubaOS. The underlying issue enables disruption of normal operation of affected APs. Exploitation is network-based with low attack complexity and none privi...

CVE-2024-31474

Summary: CVE-2024-31474 is an arbitrary file deletion vulnerability in the CLI service accessed by Aruba’s PAPI protocol used on ArubaOS/InstantOS Aruba Access Points. The vulnerability allows deletion of arbitrary files on the underlying OS, potentially interrupting normal operation and impactin...

CVE-2024-42394

CVE-2024-42394 describes unauthenticated remote code execution via the Soft AP Daemon Service, accessed by the PAPI protocol. The vulnerability allows an attacker to execute arbitrary commands on the underlying OS, potentially leading to full system compromise. Documents consistently identify the...

CVE-2024-31478

CVE-2024-31478 describes multiple unauthenticated Denial-of-Service (DoS) vulnerabilities in the Soft AP daemon (accessed via the PAPI protocol) affecting Aruba Networks ArubaOS/InstantOS. Successful exploitation can interrupt the normal operation of the affected Access Point. The connected advis...

CVE-2024-31473

CVE-2024-31473 describes a command-injection vulnerability in Aruba Networks’ deauthentication service exposed via the PAPI UDP port 8211, enabling unauthenticated remote code execution as a privileged OS user. Affected products include ArubaOS/InstantOS (Aruba Mobility-Defined Networks). Root ca...

CVE-2024-31479

CVE-2024-31479 affects Aruba Networks ArubaOS and ArubaOS InstantOS, with an unauthenticated Denial of Service against the Central Communications service accessible via the PAPI protocol. The vulnerability can interrupt normal operation of the affected service. Connected sources confirm vulnerabl...

CVE-2024-31482

CVE-2024-31482 is an unauthenticated DoS affecting Aruba Networks ArubaOS/InstantOS via the ANSI escape code service over the PAPI port, causing interruption of normal operation. The issue is documented across multiple sources, with Red Hat and NVD describing the same vulnerability in the ANSI es...

CVE-2024-31467

ArubaOS/InstantOS vulnerabilities exist in the PAPI CLI service via unauthenticated buffer overflow on UDP port 8211, enabling remote code execution with privileges on the underlying OS. Attack requires sending specially crafted packets to the PAPI UDP port; exploitation status is not consistentl...

CVE-2024-31472

Summary: Aruba InstantOS/ArubaOS versions prior to 10.5.1.0 are affected by a command-injection vulnerability in the Soft AP Daemon exposed via the PAPI UDP port 8211, enabling unauthenticated remote code execution as a privileged OS user. Affected software: Aruba InstantOS/ArubaOS (pre-10.5.1.0)...

CVE-2024-31480

CVE-2024-31480 affects Aruba Networks ArubaOS/InstantOS CLI service accessed via the PAPI protocol, with an unauthenticated Denial of Service that can interrupt normal operation. Public sources in the connected documents describe a DoS impact and that exploitation requires access to the managemen...

CVE-2024-31471

CVE-2024-31471 describes a command-injection vulnerability in Aruba’s Central Communications service (PAPI UDP port 8211) that can allow unauthenticated remote code execution as a privileged OS user. The PT-2024-24103 report confirms the issue relates to the Central Communications service with af...