CVE-2008-5563

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-15 · updated 2026-06-16
Weakness: CWE-399

Description

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame.

Affected products

Aruba Networks Aruba Mobility Controller: 2.4.8, 2.4.8.5, 2.4.8.6, 2.4.8.11, 2.5.2.11, 2.5.4.17 (+6)
Aruba Networks Aruba Mobility Controllers: 3.1.1.3
Arubanetworks Aruba Mobility Controller: 3.1.1.0, 3.1.1.3, 3.2.0.0, 3.3.1.0, 3.3.1.6

References

http://secunia.com/advisories/33057
http://securityreason.com/securityalert/4728
http://www.arubanetworks.com/support/alerts/aid-12808.asc
http://www.securityfocus.com/archive/1/499014/100/0/threaded
http://www.securityfocus.com/bid/32694
http://www.securitytracker.com/id?1021362
http://secunia.com/advisories/33057
http://securityreason.com/securityalert/4728
http://www.arubanetworks.com/support/alerts/aid-12808.asc
http://www.securityfocus.com/archive/1/499014/100/0/threaded
http://www.securityfocus.com/bid/32694
http://www.securitytracker.com/id?1021362

Get alerted when CVE-2008-5563 or the next vulnerability affects your stack