CVE-2026-23812 | BDVDB-2026-318329 Detail
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
Description#
A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or modification of traffic intended for the legitimate network gateway via a Machine-in-the-Middle (MitM) position.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: adjacent.
Weaknesses#
- CWE-300 Channel Accessible by Non-Endpoint
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.