Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.

Published

2020-12-11T02:15:10.943

Last Modified

2024-11-21T05:15:17.810

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System arubanetworks arubaos < 6.4.4.24 Yes
Operating System arubanetworks arubaos < 6.5.4.18 Yes
Operating System arubanetworks arubaos < 8.2.2.10 Yes
Operating System arubanetworks arubaos < 8.3.0.14 Yes
Operating System arubanetworks arubaos < 8.5.0.11 Yes
Operating System arubanetworks arubaos < 8.6.0.6 Yes
Operating System arubanetworks arubaos < 8.7.1.0 Yes
Hardware arubanetworks 7005 - No
Hardware arubanetworks 7008 - No
Hardware arubanetworks 7010 - No
Hardware arubanetworks 7024 - No
Hardware arubanetworks 7030 - No
Hardware arubanetworks 7205 - No
Hardware arubanetworks 7210 - No
Hardware arubanetworks 7220 - No
Hardware arubanetworks 7240xm - No
Hardware arubanetworks 7280 - No
Application arubanetworks sd-wan < 2.1.0.2 Yes
Application arubanetworks sd-wan < 2.2.0.1 Yes
Hardware arubanetworks 9004 - No
Hardware arubanetworks 9004-lte - No
Hardware arubanetworks 9012 - No
References