Vulnerability Description
ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Arubaos | 3.1.1 |
| Arubanetworks | Aruba Mobility Controller | All versions |
References
- http://secunia.com/advisories/37085Vendor Advisory
- http://www.arubanetworks.com/support/alerts/aid-102609.ascVendor Advisory
- http://www.securityfocus.com/bid/36832
- http://www.vupen.com/english/advisories/2009/3051Vendor Advisory
- http://secunia.com/advisories/37085Vendor Advisory
- http://www.arubanetworks.com/support/alerts/aid-102609.ascVendor Advisory
- http://www.securityfocus.com/bid/36832
- http://www.vupen.com/english/advisories/2009/3051Vendor Advisory
FAQ
What is CVE-2009-3836?
CVE-2009-3836 is a vulnerability with a CVSS score of 6.1 (MEDIUM). ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Associatio...
How severe is CVE-2009-3836?
CVE-2009-3836 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-3836?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Arubaos, Arubanetworks Aruba Mobility Controller.