Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22781

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Published

2023-05-08T15:15:09.943

Last Modified

2025-01-31T19:15:11.357

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-120
  • Type: Secondary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System hp arubaos ≤ 10.3.1.0 Yes
Operating System hp instantos ≤ 6.4.4.8-4.2.4.20 Yes
Operating System hp instantos ≤ 6.5.4.23 Yes
Operating System hp instantos < 8.6.0.0 Yes
Operating System hp instantos ≤ 8.6.0.19 Yes
Operating System hp instantos ≤ 8.9.0.0 Yes
Operating System hp instantos ≤ 8.10.0.4 Yes
References