An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sd-wan | Arubanetworks | 8.7.0.0-2.3.0.0 (including) | 8.7.0.0-2.3.0.6 (excluding) |
| Arubaos | Arubanetworks | 6.5.4.0 (including) | 6.5.4.22 (excluding) |
| Arubaos | Arubanetworks | 8.4.0.0 (including) | 8.6.0.17 (excluding) |
| Arubaos | Arubanetworks | 8.7.0.0 (including) | 8.7.1.9 (excluding) |
| Arubaos | Arubanetworks | 8.8.0.0 (including) | 10.3.0.1 (excluding) |