Description
A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or modification of traffic intended for the legitimate network gateway via a Machine-in-the-Middle (MitM) position.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
Default version status: affected
10.8.0.0affected10.7.0.0 to ≤ 10.7.2.2affected10.4.0.0 to ≤ 10.4.1.10affected8.13.0.0 to ≤ 8.13.1.1affected8.12.0.0 to ≤ 8.12.0.6affected8.10.0.0 to ≤ 8.10.0.21affected