HPE Aruba Networking AOS-8 Unauthenticated Denial-of-Service Vulnerability in Network Management Service

A denial-of-service vulnerability has been identified in the network management service of HPE Aruba Networking's AOS-8 Operating System. This vulnerability allows an unauthenticated remote attacker to disrupt normal device operations by sending specially crafted network packets to the affected device. Successful exploitation could cause the service process to terminate unexpectedly, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause the affected service process to crash, disrupting normal device operations and management functions.

Remediation

Users can upgrade to AOS-8.13.1.2 or AOS-8.12.0.7 to address this vulnerability. AOS-8.10.0.22 also includes the patch. Instructions for downloading the update are available on the HPE Networking Support Portal.