CVE-2018-7080:
A vulnerability in the firmware of the embedded BLE radios used in certain Aruba Access Points could allow an attacker to install malicious BLE firmware and gain access to the AP console port if the BLE radio is enabled. The BLE radio is disabled by default, and Aruba notes the issue does not affect CVE-2018-16986.
Score
A numerical rating that indicates how dangerous this vulnerability is.
7.5High- Published Date:Dec 7, 2018
- CISA KEV Date:*No Data*
- Industries Affected:20
Threat Predictions
- EPSS Score:0.2
- EPSS Percentile:47%
Exploitability
- Score:1.6
- Attack Vector:ADJACENT_NETWORK
- Attack Complexity:HIGH
- Privileges Required:NONE
- User Interaction:NONE
- Scope:UNCHANGED
Impact
- Score:5.9
- Confidentiality Impact:HIGH
- Integrity Impact:HIGH
- Availability Impact:HIGH
Description Preview
A vulnerability in the firmware of the embedded BLE radios used in certain Aruba Access Points could allow an attacker to install malicious BLE firmware and gain access to the AP console port if the BLE radio is enabled. The BLE radio is disabled by default, and Aruba notes the issue does not affect CVE-2018-16986.
Overview
This vulnerability affects the firmware of the embedded BLE radios in a subset of Aruba Access Points. When the BLE radio is enabled, an attacker could push malicious firmware to the BLE component and obtain access to the AP’s console port, potentially compromising the device. The BLE radio is disabled by default, and Aruba indicates that affected products are not impacted by CVE-2018-16986. Remediation centers on applying fixed firmware versions and, where possible, disabling BLE when not needed to reduce attack surface.
Remediation
- Upgrade to fixed firmware versions for affected devices:
- AP-3xx and IAP-3xx series: move to ArubaOS 6.4.4.20 or later.
- ArubaOS 6.5.3.x: upgrade to 6.5.3.9 or later.
- ArubaOS 6.5.4.x: upgrade to 6.5.4.9 or later.
- ArubaOS 8.x: upgrade to 8.2.2.2 or later.
- ArubaOS 8.3.x: upgrade to 8.3.0.4 or later.
- If BLE radio is not required, disable the BLE radio on affected APs to reduce exposure.
- Ensure BLE remains disabled by default and review configurations to prevent enabling BLE without authorization.
- Strengthen console-port security: restrict console access to trusted management networks, enable authentication, and disable unnecessary remote console access if possible.
- Monitor Aruba advisories and apply subsequent updates as they are released.
References
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
