CVE-2009-3836

Published: Nov 2, 2009Modified: Apr 23, 2026

6.1

Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 6.5 / Impact: 6.9

Source: NVD

Description

ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame.

Affected (8)

Products: Arubanetworks: Arubaos, Aruba Mobility Controller

Arubanetworks

2 products

Arubaos

Aruba Mobility Controller

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Arubanetworks Arubaos	Version 3.1.1 rn
Arubanetworks Arubaos	Version 3.3.1.16
Arubanetworks Arubaos	Version 3.3.1.29
Arubanetworks Arubaos	Version 3.3.1.30
Arubanetworks Arubaos	Version 3.3.2.14 fips
Arubanetworks Arubaos	Version 3.3.2.6
Arubanetworks Arubaos	Version 3.4.0
Arubanetworks Aruba Mobility Controller	All versions