CVE-2023-35979
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.
Risk Assessment
The organization may experience downtime of the management interface, which can hinder the management of network devices. This could lead to significant disruptions in network operations.
Recommendation
It is recommended to update ArubaOS software to the latest version to mitigate this vulnerability. Additionally, monitoring access to the management interface may help in detecting attempts to exploit this flaw.
Original NVD description (English source)
There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.