← CVE Intelligence

CVE-2024-25616

Hewlett Packard Enterprise (HPE) / ArubaOS Wi-Fi Controllers and Campus/Remote Access Points PUBLISHED

Description (CNA)

Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.

Affected (CNA)

Vendor / productVersions
Hewlett Packard Enterprise (HPE) / ArubaOS Wi-Fi Controllers and Campus/Remote Access Pointsaffected ArubaOS 10.5.x.x: 10.5.0.1 and below; affected ArubaOS 10.4.x.x: 10.4.0.3 and below; affected ArubaOS 8.11.x.x: 8.11.2.0 and below; affected ArubaOS 8.10.x.x: 8.10.0.9 and below

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.