CVE-2023-45622 | THREATINT

Assigner	hpe
Reserved	2023-10-09
Published	2023-11-14
Updated	2024-08-12

Description

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.

HIGH: 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Product status

Default status

affected

ArubaOS 10.5.x.x: 10.5.0.0 and below

affected

ArubaOS 10.4.x.x: 10.4.0.2 and below

affected

InstantOS 8.11.x.x: 8.11.1.2 and below

affected

InstantOS 8.10.x.x: 8.10.0.8 and below

affected

InstantOS 8.6.x.x: 8.6.0.22 and below

affected

Credits

XiaoC from Moonlight Bug Hunter reporter

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt

cve.org CVE-2023-45622

nvd.nist.gov CVE-2023-45622

Download JSON

https://cve.threatint.com/CVE/CVE-2023-45622

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.