Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

Cyber Security

Products You May Like

May 03, 2024NewsroomVulnerability / Software Security

HPE Aruba Networking (formerly Aruba Networks) has released security updates to address critical flaws impacting ArubaOS that could result in remote code execution (RCE) on affected systems.

Of the 10 security defects, four are rated critical in severity –

  • CVE-2024-26304 (CVSS score: 9.8) – Unauthenticated Buffer Overflow Vulnerability in the L2/L3 Management Service Accessed via the PAPI Protocol
  • CVE-2024-26305 (CVSS score: 9.8) – Unauthenticated Buffer Overflow Vulnerability in the Utility Daemon Accessed via the PAPI Protocol
  • CVE-2024-33511 (CVSS score: 9.8) – Unauthenticated Buffer Overflow Vulnerability in the Automatic Reporting Service Accessed via the PAPI Protocol
  • CVE-2024-33512 (CVSS score: 9.8) – Unauthenticated Buffer Overflow Vulnerability in the Local User Authentication Database Accessed via the PAPI Protocol

A threat actor could exploit the aforementioned buffer overflow bugs by sending specially crafted packets destined to the Process Application Programming Interface (PAPI) UDP port (8211), thereby gaining the ability to execute arbitrary code as a privileged user on the underlying operating system.

Cybersecurity

The vulnerabilities, which impact Mobility Conductor (formerly Mobility Master), Mobility Controllers, and WLAN Gateways and SD-WAN Gateways managed by Aruba Central, are present in the following software versions –

  • ArubaOS 10.5.1.0 and below
  • ArubaOS 10.4.1.0 and below
  • ArubaOS 8.11.2.1 and below, and
  • ArubaOS 8.10.0.10 and below

They also impact the ArubaOS and SD-WAN software versions that have reached end of maintenance status –

  • ArubaOS 10.3.x.x
  • ArubaOS 8.9.x.x
  • ArubaOS 8.8.x.x
  • ArubaOS 8.7.x.x
  • ArubaOS 8.6.x.x
  • ArubaOS 6.5.4.x
  • SD-WAN 8.7.0.0-2.3.0.x, and
  • SD-WAN 8.6.0.4-2.2.x.x

A security researcher named Chancen has been credited with discovering and reporting seven of the 10 issues, including the four critical buffer overflow vulnerabilities.

Users are advised to apply the latest fixes to mitigate potential threats. As temporary workarounds for ArubaOS 8.x, the company is recommending that users enable the Enhanced PAPI Security feature using a non-default key.

Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.

Products You May Like

Articles You May Like

Scientists Capture First Detailed Images of North Star Polaris’ Surface Revealing Spots
North Korean Hackers Target Developers with Malicious npm Packages
PS5 Pro Design, Launch Timeline Leaked; New Console Might Come Without Disc Drive
Intel working with bankers to present board with strategic options
Realme P2 Pro Allegedly Spotted on BIS Certification Website, India Launch Seems Imminent

Leave a Reply

Your email address will not be published. Required fields are marked *