CVE-2024-26304
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 44.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 44.00% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-121
- Source
- security-alert@hpe.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.