CVE-2024-26305

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt	Broken Link
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt	Broken Link

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4-2.2.0.0:::::::*
	cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4-2.2.0.7:::::::*
	cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0-2.3.0.0:::::::*
	cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0-2.3.0.9:::::::*
	cpe:2.3:o:arubanetworks:arubaos::::::::
	cpe:2.3:o:arubanetworks:arubaos::::::::
	cpe:2.3:o:arubanetworks:arubaos::::::::
	cpe:2.3:o:arubanetworks:arubaos::::::::

History

22 Sep 2026, 19:52

Type	Values Removed	Values Added
CPE		cpe:2.3:o:arubanetworks:arubaos:::::::: cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4-2.2.0.7:::::::* cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0-2.3.0.0:::::::* cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4-2.2.0.0:::::::* cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0-2.3.0.9:::::::*
References	~~() https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt -~~	() https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt - Broken Link
First Time		Arubanetworks Arubanetworks arubaos Arubanetworks sd-wan

Information

Published : 2024-05-01 15:15

Updated : 2026-09-22 19:52

NVD link : CVE-2024-26305

Mitre link : CVE-2024-26305

CVE.ORG link : CVE-2024-26305

JSON object : View

Products Affected

arubanetworks

arubaos
sd-wan

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2024-26305", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-26305", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2024-05-03T04:00:12.067816Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-alert@hpe.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-alert@hpe.com", "affectedData": [{"vendor": "Hewlett Packard Enterprise (HPE)", "product": "Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central", "versions": [{"status": "affected", "version": "ArubaOS 10.5.x.x: 10.5.1.0 and below"}, {"status": "affected", "version": "ArubaOS 10.4.x.x: 10.4.1.0 and below"}, {"status": "affected", "version": "ArubaOS 8.11.x.x: 8.11.2.1 and below"}, {"status": "affected", "version": "ArubaOS 8.10.x.x: 8.10.0.10 and below"}], "defaultStatus": "affected"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:o:arubanetworks:arubaos:8.10.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "8.10.0.0", "lessThan": "8.10.0.10", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:10.5.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "10.5.0.0", "lessThan": "10.5.1.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:10.4.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "10.4.0.0", "lessThan": "10.4.1.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:8.11.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "8.11.0.0", "lessThan": "8.11.2.1", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:10.3.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "10.3.0.0", "lessThan": "10.4.0.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:8.9.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "8.9.0.0", "lessThan": "8.10.0.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:8.8.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "8.8.0.0", "lessThan": "8.9.0.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:8.7.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "8.7.0.0", "lessThan": "8.8.0.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:8.6.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "8.6.0.0", "lessThan": "8.7.0.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:arubanetworks:arubaos:6.5.4.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "arubaos", "versions": [{"status": "affected", "version": "6.5.4.0", "lessThan": "6.5.5.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "sd-wan", "versions": [{"status": "affected", "version": "8.7.0.0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4:*:*:*:*:*:*:*"], "vendor": "arubanetworks", "product": "sd-wan", "versions": [{"status": "affected", "version": "8.6.0.4", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "affected"}]}], "published": "2024-05-01T15:15:14.863", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt", "tags": ["Broken Link"], "source": "security-alert@hpe.com"}, {"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-004.txt", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. \n\n"}, {"lang": "es", "value": "Existe una vulnerabilidad de desbordamiento de b\u00fafer en el daemon de utilidad subyacente que podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo no autenticado mediante el env\u00edo de paquetes especialmente manipulados destinados al puerto UDP (8211) PAPI (protocolo de administraci\u00f3n de puntos de acceso de Aruba). La explotaci\u00f3n exitosa de esta vulnerabilidad da como resultado la capacidad de ejecutar c\u00f3digo arbitrario como usuario privilegiado en el sistema operativo subyacente."}], "lastModified": "2026-09-22T19:52:37.933", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4-2.2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB32389F-AFBF-4CC3-ADB7-3BF0EE541246"}, {"criteria": "cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4-2.2.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A24F910-3EDB-4830-9F36-FB35BA744597"}, {"criteria": "cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0-2.3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35E57D49-0F8E-4968-9868-2CFACFCF25ED"}, {"criteria": "cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0-2.3.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F3E60F6-F2E4-4F95-9793-814EC59E112C"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4785B40-D195-40E8-9DBA-0FE7C4FF5330", "versionEndExcluding": "8.10.0.12", "versionStartIncluding": "6.5.4.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF877659-17F5-480D-A421-73B8D9560773", "versionEndExcluding": "8.11.2.2", "versionStartIncluding": "8.11.0.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "658451AC-7862-4B19-B0F5-2C71DA970A9D", "versionEndExcluding": "10.4.1.1", "versionStartIncluding": "10.4.0.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3088AE26-C175-4D22-A550-30B97164D15B", "versionEndExcluding": "10.5.1.1", "versionStartIncluding": "10.5.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-alert@hpe.com"}