CVE-2023-38484: Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways
Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in the affected controller leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-38484?
CVE-2023-38484 is a vulnerability that exists in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways.
What is the severity of CVE-2023-38484?
CVE-2023-38484 has a severity rating of 6.4, which is considered high.
How can an attacker exploit CVE-2023-38484?
An attacker could exploit CVE-2023-38484 to execute arbitrary code early in the boot sequence, allowing them to gain access to and change underlying sensitive information.
Which software versions are affected by CVE-2023-38484?
ArubaOS versions 8.6.0.0 to 8.6.0.22, 8.10.0.0 to 8.10.0.7, 8.11.0.0 to 8.11.1.1, and 10.4.0.0 to 10.4.0.2 are affected by CVE-2023-38484.
How can I fix CVE-2023-38484?
To fix CVE-2023-38484, it is recommended to apply the latest security patches and updates provided by Aruba Networks.