CVE-2015-1348

Опубликовано: 03 фев. 2015

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote attackers to cause a denial of service (crash or reset to factory default) via a malformed frame to the wireless interface.

Ссылки

http://www.arubanetworks.com/support/alerts/aruba-psa-2015-001.txt
Vendor Advisory
http://www.arubanetworks.com/support/alerts/aruba-psa-2015-001.txt
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:arubanetworks:instant_access_point_firmware:*:*:*:*:*:*:*:*

Версия до 4.0.0.6 (включая)

cpe:2.3:o:arubanetworks:instant_access_point_firmware:4.1.0.0:*:*:*:*:*:*:*

cpe:2.3:o:arubanetworks:instant_access_point_firmware:4.1.0.1:*:*:*:*:*:*:*

cpe:2.3:o:arubanetworks:instant_access_point_firmware:4.1.0.2:*:*:*:*:*:*:*

cpe:2.3:o:arubanetworks:instant_access_point_firmware:4.1.1:*:*:*:*:*:*:*

cpe:2.3:o:arubanetworks:instant_access_point_firmware:4.1.1.1:*:*:*:*:*:*:*

cpe:2.3:h:arubanetworks:instant_access_point:-:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00536

Низкий

7.8 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-h94h-73hh-m5fr

github

больше 3 лет назад