CVE-2018-7080

mediumPriorität · verfolgen · 30EPSS 0.006 · 51. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.64% (51st) EPSS

CVSS 5.4 · medium

Is it mine?

11 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points. An attacker who is able to exploit the vulnerability could install new, potentially malicious firmware into the AP's BLE radio and could then gain access to the AP's console port. This vulnerability is applicable only if the BLE radio has been enabled in affected access points. The BLE radio is disabled by default. Note - Aruba products are NOT affected by a similar vulnerability being tracked as CVE-2018-16986.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.4–7.5

v2.05.4mediumAV:A/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 5.5 · Auswirkung 6.4

v3.07.5highCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.6 · Auswirkung 5.9

v3.06.9mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.1highAV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:Hsecondary · FSTEC (BDU) RU

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-415US

betroffene Produkte (11)

Betroffene Produkte und Versionsbereiche.

Hewlett Packard Enterprise Aruba Access Points≤ AP-3xx and IAP-3xx series access points, AP-203R, AP-203RP, ArubaOS 6.4.4.x prior to 6.4.4.20, ArubaOS 6.5.3.x prior to 6.5.3.9, ArubaOS 6.5.4.x prior to 6.5.4.9, ArubaOS 8.x prior to 8.2.2.2, ArubaOS 8.3.x prior to 8.3.0.4enisa_euvdEU
Texas Instruments Inc. BLE-STACK≤ 2.2.2fstec_bduRU
arubanetworks 203r firmwarealle VersionennvdUScpe:2.3:o:arubanetworks:203r_firmware:*:*:*:*:*:*:*:*
arubanetworks 203rp firmwarealle VersionennvdUScpe:2.3:o:arubanetworks:203rp_firmware:*:*:*:*:*:*:*:*
arubanetworks ap-300 series access points firmwarealle VersionennvdUScpe:2.3:o:arubanetworks:ap-300_series_access_points_firmware:*:*:*:*:*:*:*:*
arubanetworks ap-300 series instant access points firmwarealle VersionennvdUScpe:2.3:o:arubanetworks:ap-300_series_instant_access_points_firmware:*:*:*:*:*:*:*:*
arubanetworks arubaos6.4.4.0 → 6.4.4.20nvdUScpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
arubanetworks arubaos6.5.3.0 → 6.5.3.9nvdUScpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
arubanetworks arubaos6.5.4.0 → 6.5.4.9nvdUScpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
arubanetworks arubaos8.0.0.0 → 8.2.2.2nvdUScpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
arubanetworks arubaos8.3.0.0 → 8.3.0.4nvdUScpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

veröffentlicht 2018-12-07geändert 2026-06-17

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-006.txt cnnvd
https://www.securityfocus.com/bid/105814 cnnvd
http://www.securityfocus.com/bid/105814 enisa_euvd
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-006.txt enisa_euvd
http://www.securityfocus.com/bid/105814Third Party AdvisoryVDB Entrynvd
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-006.txtMitigationVendor Advisorynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan