CVE-2023-45622

Description

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.

Reserved 2023-10-09 | Published 2023-11-14 | Updated 2024-08-12 | Assigner hpe

Product status

Default status
affected

ArubaOS 10.5.x.x: 10.5.0.0 and below
affected

ArubaOS 10.4.x.x: 10.4.0.2 and below
affected

InstantOS 8.11.x.x: 8.11.1.2 and below
affected

InstantOS 8.10.x.x: 8.10.0.8 and below
affected

InstantOS 8.6.x.x: 8.6.0.22 and below
affected

Credits

XiaoC from Moonlight Bug Hunter reporter

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt

cve.org (CVE-2023-45622)

nvd.nist.gov (CVE-2023-45622)

Download JSON