CVE-2026-23811
3.1
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.6 / Impact: 1.4
Source: NVD
Description
A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack.
Affected (6)
Products: Arubanetworks: Arubaos
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 10.3.0.0 to 10.4.1.10 |
| Running on/with | Platform Versions |
|---|---|
Arubanetworks 7010 | All versions |
Arubanetworks 7030 | All versions |
Arubanetworks 7205 | All versions |
Arubanetworks 7210 | All versions |
Arubanetworks 7220 | All versions |
Arubanetworks 7240xm | All versions |
Arubanetworks 7280 | All versions |
Arubanetworks 9004 | All versions |
Arubanetworks 9004 Lte | All versions |
Arubanetworks 9012 | All versions |
Arubanetworks 9106 | All versions |
Arubanetworks 9114 | All versions |
Arubanetworks 9240 | All versions |
Arubanetworks Ap 634 | All versions |
Arubanetworks Ap 635 | All versions |
Arubanetworks Ap 654 | All versions |
Arubanetworks Ap 655 | All versions |
References (1)
Source: security-alert@hpe.com
Vendor Advisory
Timeline
No history available yet.