CVE-2024-33512
Published: 01 May 2024
Summary
CVE-2024-33512 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Arubanetworks (inferred from references). Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 4.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-33512 is a buffer overflow vulnerability in the Local User Authentication Database service on Aruba networking devices. The flaw resides in handling of the PAPI protocol and can be triggered over UDP port 8211, leading to unauthenticated remote code execution with the privileges of a privileged operating-system user. The issue carries a CVSS 3.1 base score of 9.8.
An unauthenticated attacker can exploit the vulnerability by sending specially crafted PAPI packets to the affected service. Successful exploitation grants the ability to execute arbitrary code on the underlying operating system without any prior authentication or user interaction.
Aruba has published advisory ARUBA-PSA-2024-004 describing the issue and available remediation steps. The current EPSS score of 0.2284 has shown no material increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-31250
Vulnerability details
There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful…
more
exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.