Priority HIGH 84
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86491 · Published 2017-10-02 · Fixed CWE-787
Priority HIGH 65
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.15163 · Published 2024-05-01 · No fix listed CWE-121
Priority MEDIUM 53
There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point m…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02132 · Published 2023-11-14 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02132 · Published 2023-11-14 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02132 · Published 2023-11-14 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02068 · Published 2023-07-25 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02068 · Published 2023-07-25 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02068 · Published 2023-07-25 · No fix listed CWE-120
Priority MEDIUM 53
There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.019 · Published 2022-11-03 · Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 52
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01651 · Published 2024-05-14 · No fix listed CWE-78
Priority MEDIUM 52
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poin…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01582 · Published 2024-05-14 · No fix listed CWE-78
Priority MEDIUM 52
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acce…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01582 · Published 2024-05-14 · No fix listed CWE-78
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 51
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01188 · Published 2024-05-14 · No fix listed CWE-121
Priority MEDIUM 51
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acces…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01138 · Published 2024-05-14 · No fix listed CWE-121
Priority MEDIUM 51
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acces…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01138 · Published 2024-05-14 · No fix listed CWE-121
Priority MEDIUM 51
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01138 · Published 2024-05-14 · No fix listed CWE-121
Priority MEDIUM 51
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01138 · Published 2024-05-14 · No fix listed CWE-121
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Priority MEDIUM 51
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-02-28 · No fix listed CWE-120
Load more