What’s Vulnerable › Vulnerabilities

CVE-2009-3836

• Severity: medium (CVSS 6.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-11-02 · updated 2026-06-16

Description

ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame.

Affected products

• Arubanetworks Aruba Mobility Controller: all versions
• Hewlett Packard Enterprise (HPE) ArubaOS (AOS): 3.1.1-rn, 3.3.1.16, 3.3.1.29, 3.3.1.30, 3.3.2.6, 3.3.2.14-fips (+1)

References

• http://secunia.com/advisories/37085
• http://www.arubanetworks.com/support/alerts/aid-102609.asc
• http://www.securityfocus.com/bid/36832
• http://www.vupen.com/english/advisories/2009/3051
• http://secunia.com/advisories/37085
• http://www.arubanetworks.com/support/alerts/aid-102609.asc
• http://www.securityfocus.com/bid/36832
• http://www.vupen.com/english/advisories/2009/3051

Get alerted when CVE-2009-3836 or the next vulnerability affects your stack