CVE-2024-25616

LOW

ArubaOS 8.10.0.0-8.10.0.9 - Partial Sensitive Information Disclosure in IKE_AUTH Negotiation

Title source: llm

Description

Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.

References (1)

Core 1

Core References

Broken Link

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-002.txt

Scores

CVSS v3 3.7

EPSS 0.0008

EPSS Percentile 24.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (1)

arubanetworks/arubaos 8.10.0.0 - 8.10.0.10

Published Mar 05, 2024

Tracked Since Feb 18, 2026