CVE-2018-7080 Privilege escalation in Aruba Access Points
Attackers can install malicious firmware on enabled BLE radios in Aruba Access Points to gain console access and escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-7080?
CVE-2018-7080 is a high-severity vulnerability in Arubanetworks Arubaos, published on 7 Dec 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points. An attacker who is able to exploit the vulnerability could install new, potentially malicious firmware into the AP's BLE radio and could then gain access to the AP's console port. This vulnerability is applicable only if the BLE radio has been enabled in affected access points. The BLE radio is disabled by default. Note - Aruba products are NOT affected by a similar vulnerability being tracked as CVE-2018-16986.
Which versions are affected by CVE-2018-7080?
It affects 5 products.
Products include Arubanetworks 203r Firmware, Arubanetworks 203rp Firmware, Arubanetworks Ap-300 Series Access Points Firmware, Arubanetworks Ap-300 Series Instant Access Points Firmware, Arubanetworks Arubaos.
How do I fix CVE-2018-7080?
No fix has been published for CVE-2018-7080 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-7080 being exploited?
There is no known exploitation of CVE-2018-7080 in the wild and no public exploit code.
Sources
Also known as GHSA-c828-r7p5-j3g3.