Article Details
Scrape Timestamp (UTC): 2024-05-03 04:54:05.810
Source: https://thehackernews.com/2024/05/four-critical-vulnerabilities-expose.html
Original Article Text
Click to Toggle View
Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks. HPE Aruba Networking (formerly Aruba Networks) has released security updates to address critical flaws impacting ArubaOS that could result in remote code execution (RCE) on affected systems. Of the 10 security defects, four are rated critical in severity - A threat actor could exploit the aforementioned buffer overflow bugs by sending specially crafted packets destined to the Process Application Programming Interface (PAPI) UDP port (8211), thereby gaining the ability to execute arbitrary code as a privileged user on the underlying operating system. The vulnerabilities, which impact Mobility Conductor (formerly Mobility Master), Mobility Controllers, and WLAN Gateways and SD-WAN Gateways managed by Aruba Central, are present in the following software versions - They also impact the ArubaOS and SD-WAN software versions that have reached end of maintenance status - A security researcher named Chancen has been credited with discovering and reporting seven of the 10 issues, including the four critical buffer overflow vulnerabilities. Users are advised to apply the latest fixes to mitigate potential threats. As temporary workarounds for ArubaOS 8.x, the company is recommending that users enable the Enhanced PAPI Security feature using a non-default key.
Daily Brief Summary
HPE Aruba has issued updates for severe vulnerabilities in ArubaOS, potentially enabling remote code execution.
Four out of ten security flaws have been identified as critical, allowing arbitrary code execution by a remote attacker.
Attack vectors include exploiting buffer overflow vulnerabilities by sending malicious packets to the PAPI UDP port.
Affected products are Mobility Conductor, Mobility Controllers, and WLAN and SD-WAN Gateways under Aruba Central management.
Vulnerable software versions include those in ArubaOS and SD-WAN which are no longer maintained.
Security researcher Chancen reported seven of the issues, highlighting the critical nature of the four buffer overflow flaws.
HPE Aruba recommends installing the latest patches, and as an interim solution, enabling Enhanced PAPI Security on ArubaOS 8.x with a non-default key.