CVE-2023-35979: Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface
There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-35979?
CVE-2023-35979 is an unauthenticated buffer overflow vulnerability in the ArubaOS web-based management interface.
What is the severity of CVE-2023-35979?
CVE-2023-35979 has a severity rating of 7.5, which is considered high.
How does CVE-2023-35979 affect the ArubaOS software?
CVE-2023-35979 affects ArubaOS versions between 6.5.4.0 and 8.6.0.21, versions between 8.7.0.0 and 8.10.0.7, and versions between 8.11.0.0 and 8.11.1.1.
What is the impact of CVE-2023-35979?
Successful exploitation of CVE-2023-35979 leads to a Denial-of-Service (DoS) condition in the web-based management interface of the ArubaOS controller.
How can I fix CVE-2023-35979?
To fix CVE-2023-35979, it is recommended to upgrade to a patched version of ArubaOS that is not affected by the vulnerability.