Read the docs
TI-2020-15109 Aliases CVE-2020-24637GHSA-c43f-p3rv-7q34

Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass…

Priority LOW 35Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.

Why it matters now

EPSS 0.0157 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Aruba 9000 Gateway2.1.0.1; up to 2.2.0.0—No fix listedCNA
—Aruba 7000 Series Mobility Controllers6.4.4.23; 6.5.4.17; 8.2.2.9; 8.3.0.13; 8.5.0.10; 8.6.0.5; up to 8.7.0.0—No fix listedCNA
—Aruba 7200 Series Mobility Controllers6.4.4.23; 6.5.4.17; 8.2.2.9; 8.3.0.13; 8.5.0.10; 8.6.0.5; up to 8.7.0.0—No fix listedCNA
  • Aruba 9000 Gateway Vendor— Affected 2.1.0.1; up to 2.2.0.0 Fixed in — No fix listed CNA
  • Aruba 7000 Series Mobility Controllers Vendor— Affected 6.4.4.23; 6.5.4.17; 8.2.2.9; 8.3.0.13; 8.5.0.10; 8.6.0.5; up to 8.7.0.0 Fixed in — No fix listed CNA
  • Aruba 7200 Series Mobility Controllers Vendor— Affected 6.4.4.23; 6.5.4.17; 8.2.2.9; 8.3.0.13; 8.5.0.10; 8.6.0.5; up to 8.7.0.0 Fixed in — No fix listed CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*before 8.5.0.11; 8.6.0.0 to before 8.6.0.6; 8.7.0.0 to before 8.7.1.0VulnerableArubanetworks
cpe:2.3:h:arubanetworks:7005:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7008:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7024:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
  • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:* Versions before 8.5.0.11; 8.6.0.0 to before 8.6.0.6; 8.7.0.0 to before 8.7.1.0 Vulnerable ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7005:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7008:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7024:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*before 2.1.0.2; 2.2.0.0 to before 2.2.0.1VulnerableArubanetworks
cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*not specified by NVDRunning onArubanetworks
  • cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:* Versions before 2.1.0.2; 2.2.0.0 to before 2.2.0.1 Vulnerable ·Arubanetworks
  • cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks
  • cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arubanetworks

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-24637
  2. 2026-10-03 Alias added: GHSA-c43f-p3rv-7q34

References

Advisory 1

  • TI-2017-10594 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… CVSS 3.1CRITICAL 9.8
  • TI-2024-17386 Stack-based buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor… CVSS 3.1CRITICAL 9.8
  • TI-2023-24417 Buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103… CVSS 3.1CRITICAL 9.8
  • TI-2023-24416 Buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103… CVSS 3.1CRITICAL 9.8
  • TI-2023-24415 Buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103… CVSS 3.1CRITICAL 9.8
  • TI-2023-18042 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol CVSS 3.1CRITICAL 9.8
See all 232 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences