Riskcovery

CVE-2023-22787

Unauthenticated Denial of Service (DoS) in Aruba InstantOS or ArubaOS 10 Service Accessed via the PAPI Protocol

State
Published
Severity
7.5 High
Published
May 8, 2023
Updated
Jan 31, 2025
Reserved
Jan 6, 2023

Read the record on cve.org

Description

An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hhpe

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Aruba Access Points running InstantOS and ArubaOS 10Hewlett Packard Enterprise (HPE)
  • Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and belowAffected
  • Aruba InstantOS 6.5.x: 6.5.4.23 and belowAffected
  • Aruba InstantOS 8.6.x: 8.6.0.19 and belowAffected
  • Aruba InstantOS 8.10.x: 8.10.0.4 and belowAffected
  • ArubaOS 10.3.x: 10.3.1.0 and belowAffected
  • See reference document for further detailsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.