← volver
CVE-2023-35982

Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

CVSS 9.8 CRITICALEPSS 1.6%
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.8EPSS 1.6%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
25 jul 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →