CVE-2024-26304
Published: 01 May 2024
Summary
CVE-2024-26304 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Arubanetworks (inferred from references). Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 1.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A buffer overflow vulnerability exists in the L2/L3 Management service of Aruba networking products that rely on the PAPI protocol. The flaw is triggered by specially crafted packets sent to UDP port 8211 and is tracked as CVE-2024-26304 with a CVSS score of 9.8 and CWE-121.
Unauthenticated remote attackers can exploit the issue over the network to execute arbitrary code with privileged operating-system rights. No authentication or user interaction is required, enabling an attacker who can reach the management port to fully compromise the affected device.
Aruba has published advisory ARUBA-PSA-2024-004 describing the issue and associated remediation steps. The current EPSS score of 0.7067, with a recorded peak of 0.7324, indicates sustained exploitation interest following disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-23575
Vulnerability details
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of…
more
this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.