This Aruba Security Advisory has been published on 27 January 2015 is regarding Wireless DoS attacked.
Aruba Product Security Advisory
Advisory ID: ARUBA-PSA-2015-001
Publication Date: 2015-01-27
Status: Confirmed, Fixed
Aruba Instant (IAP) Wireless DoS Attack
Aruba has identified a problem with Aruba Instant firmware which could allow an attacker
to crash or clear the configuration of an access point through a wireless interface.
-- Aruba Instant version 184.108.40.206 and below (version <= 220.127.116.11)
-- Aruba Instant version 4.1 below 18.104.22.168 (22.214.171.124 <= version < 126.96.36.199)
Upgrade to one of the following software versions:
-- Aruba Instant version 188.8.131.52
-- Aruba Instant version 184.108.40.206
At the time of publication, version 220.127.116.11 is available through Aruba's cloud
image server; this version may be installed from within the IAP administrative
This vulnerability allows an attacker to cause an IAP to halt operation by sending
crafted malformed frames over a wireless interface. Under some conditions,
the attack could cause an IAP cluster to lose its configuration, forcing the
cluster back to a factory-default state.
In order to protect customer networks, Aruba is providing no additional
details in the initial advisory. In accordance with our vulnerability
disclosure policy, Aruba will update this advisory in 60 days to provide
full details of the vulnerability.
here is the source detail for the latest Aruba Security Advisory Click Here
0 Komentar untuk "Aruba latest : January 2015 Security Advisory"