CVE-2024-31466

The vulnerability (CWE-121 — stack-based buffer overflow) is located in the PAPI protocol handling layer, which is Aruba's access point management protocol running on UDP port 8211. An attacker can send specially crafted packets to this port, causing a buffer overflow on the stack in the CLI service. Successful exploitation of the vulnerability allows arbitrary code execution with the privileges of a privileged system user, without the need to possess any credentials.

An attacker gains the ability to execute arbitrary code with the privileges of a privileged user on the device's operating system, which means complete takeover of the access point or network controller.

Apply patches available from the manufacturer in accordance with the references: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us and https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt. As a temporary workaround, it is recommended to restrict access to UDP port 8211 (PAPI) exclusively to trusted hosts using firewall or ACL lists on edge devices.

Devices running ArubaOS (Aruba Networks) and HP InstantOS — specific versions indicated in the manufacturer's references (ARUBA-PSA-2024-006 and HPE Security Bulletin hpesbnw04647)