CVE-2008-5563: Aruba Networks Aruba Mobility Controller

High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame.

Affected products

• Aruba Networks Aruba Mobility Controller: version 2.4.8 only; version 2.4.8.5 only; version 2.4.8.6 only; version 2.4.8.11 only; version 2.5.2.11 only; version 2.5.4.17 only; …
• Aruba Networks Aruba Mobility Controllers: version 3.1.1.3 only
• Arubanetworks Aruba Mobility Controller: version 3.1.1.0 only; version 3.1.1.3 only; version 3.2.0.0 only; version 3.3.1.0 only; version 3.3.1.6 only

Published 2008-12-15. Last modified 2026-06-16.