CVE-2020-24634

CRITICAL

9.8

CVSS Score

Published: December 11, 2020 at 01:22 AM UTC

Updated: June 17, 2026 at 03:05 AM UTC

15 products affected across 1 vendorArubaosSd WAN7010

Using Aruba 9000 Gateway by N/A?

Get instant alerts when new vulnerabilities affect Aruba 9000 Gateway - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 2%

Description

An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Arubaos · Aruba Networks

95%

v ≤ 2.2.0.0v ≤ 8.7.0.0v < 8.2.2.108.3.0.0 ≤ v < 8.3.0.148.4.0.0 ≤ v < 8.5.0.118.6.0.0 ≤ v < 8.6.0.68.7.0.0 ≤ v < 8.7.1.02.1.0.1 6.4.4.23 6.5.4.17 8.2.2.9 8.3.0.13 8.5.0.10 8.6.0.5

Affected range stops below 8.2.2.10, so it looks safe — our inference, not a vendor statement

Affected range stops below 8.3.0.14, so it looks safe — our inference, not a vendor statement

Affected range stops below 8.5.0.11, so it looks safe — our inference, not a vendor statement

Affected range stops below 8.6.0.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 8.7.1.0, so it looks safe — our inference, not a vendor statement

arubanetworks-7005 (environment) · arubanetworks-7008 (environment) · arubanetworks-7010 (environment) · arubanetworks-7024 (environment) · arubanetworks-7030 (environment) · arubanetworks-7205 (environment) · arubanetworks-7210 (environment) · arubanetworks-7220 (environment) · arubanetworks-7240xm (environment) · arubanetworks-7280 (environment)

Sd WAN · Aruba Networks

95%

v ≤ 2.2.0.0v < 2.1.0.22.2.0.0 ≤ v < 2.2.0.12.1.0.1

Affected range stops below 2.1.0.2, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.2.0.1, so it looks safe — our inference, not a vendor statement

arubanetworks-9004 (environment) · arubanetworks-9004-lte (environment) · arubanetworks-9012 (environment)

7005 · Aruba Networksdevice

80%

All versions

7008 · Aruba Networksdevice

80%

All versions