Description
A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
Default version status: affected
10.8.0.0affected10.7.0.0 to ≤ 10.7.2.2affected10.4.0.0 to ≤ 10.4.1.10affected8.13.0.0 to ≤ 8.13.1.1affected8.12.0.0 to ≤ 8.12.0.6affected8.10.0.0 to ≤ 8.10.0.21affected