CVE-2023-45615: There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's a...

Summary

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities resu...

What to do

Update arubanetworks arubaos to version 10.4.0.3 or later.

Affected software

Vendor	Product	Affected versions
arubanetworks	arubaos	>= 10.3.0.0, < 10.4.0.3 10.5.0.0 `cpe:2.3:o:arubanetworks:arubaos::::::::`
hp	instantos	>= 6.4.0.0, < 8.6.0.23 >= 8.10.0.0, < 8.10.0.9 >= 8.11.0.0, < 8.11.2.0 `cpe:2.3:o:hp:instantos::::::::`

Original advisory text

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's a...

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt Mitigation Vendor Advisory