CVE-2024-26305CWE-121

CVE-2024-26305

Critical · published May 1, 2024

CVSS v3.1
9.8
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

🚨 A buffer overflow lurking in Aruba's Utility daemon could let attackers execute arbitrary code just by sending crafted packets! 🔥 Think of it like a restaurant kitchen where a single, oversized order causes chaos — the kitchen can’t handle it and everything spills over. In this case, a well-timed packet can overflow the system's defenses and let an attacker cook up trouble from afar. With this vulnerability, an attacker could gain privileged access to the operating system and run any code they choose. This means they could potentially steal sensitive information, alter configurations, or even take complete control of the system — absolutely devastating for any network reliant on these access points.

Put simply

Think of it like a restaurant kitchen where a single, oversized order causes chaos — the kitchen can’t handle it and everything spills over. In this case, a well-timed packet can overflow the system's defenses and let an attacker cook up trouble from afar. This buffer overflow vulnerability occurs when specially crafted packets are sent to the PAPI UDP port (8211), enabling unauthenticated remote code execution on the underlying operating system as a privileged user.

What to do

With this vulnerability, an attacker could gain privileged access to the operating system and run any code they choose. This means they could potentially steal sensitive information, alter configurations, or even take complete control of the system — absolutely devastating for any network reliant on these access points. Immediately patch the affected systems to the latest version released by Aruba, ensuring that the UDP port 8211 is secured against unauthorized access. Regularly audit your network configurations and monitor for any unusual activity that could indicate exploitation attempts. You’ve got this! By staying proactive and following these steps, you can secure your network against this critical vulnerability. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.15163 · 96.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-05-01T19:15Z
Affected products (8)
ProductVersionsFixed in
arubanetworks/sd-wanall versions—
arubanetworks/sd-wanall versions—
arubanetworks/sd-wanall versions—
arubanetworks/sd-wanall versions—
arubanetworks/arubaos≥ 6.5.4.0, < 8.10.0.128.10.0.12
arubanetworks/arubaos≥ 8.11.0.0, < 8.11.2.28.11.2.2
arubanetworks/arubaos≥ 10.4.0.0, < 10.4.1.110.4.1.1
arubanetworks/arubaos≥ 10.5.0.0, < 10.5.1.110.5.1.1
References (2)
EPSS history
Timeline
  • 01 MAY 14:52Z
    There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted…
    cvelistv5