CVE-2023-45623: Arubanetworks Arubaos

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.

Affected products

• Arubanetworks Arubaos: from 10.3.0.0, before 10.4.0.3 (fixed in 10.4.0.3); version 10.5.0.0 only
• HP Instantos: from 6.4.0.0, before 8.6.0.23 (fixed in 8.6.0.23); from 8.10.0.0, before 8.10.0.9 (fixed in 8.10.0.9); from 8.11.0.0, before 8.11.2.0 (fixed in 8.11.2.0)

Published 2023-11-14. Last modified 2026-06-17.