UpHeron
All vulnerabilities

Servers and applications

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below;…

Severity
Critical 9.8
Published
11 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
6.5.4.18, 8.2.2.10, 8.3.0.14, 8.5.0.11, 8.6.0.6, 8.7.1.0
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:arubanetworks:arubaos
  • From 8.7.0.0 before 8.7.1.0
  • From 8.6.0.0 before 8.6.0.6
  • From 8.4.0.0 before 8.5.0.11
  • From 8.3.0.0 before 8.3.0.14
All 7 release lines
  • Every version before 6.4.4.24
  • From 6.5.0.0 before 6.5.4.18
  • From 8.0.0.0 before 8.2.2.10
  • From 8.3.0.0 before 8.3.0.14
  • From 8.4.0.0 before 8.5.0.11
  • From 8.6.0.0 before 8.6.0.6
  • From 8.7.0.0 before 8.7.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-24633
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-24633