CVE-2017-9003 Vulnerability Details

  /     /     /  

CVE-2017-9003 Metadata Quick Info

CVE Published: 06/08/2018 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: hpe | Vendor: Hewlett Packard Enterprise | Product: ArubaOS
Status : PUBLISHED

---

CVE-2017-9003 Description

Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: unauthenticated memory corruption leading to remote code execution
Source: Hewlett Packard Enterprise

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).