CVE-2008-0150

MEDIUM 6.8CVE-2008-0150 · Published 09/01/2008 · updated 16/06/2026

In short

CVE-2008-0150 is a MEDIUM (CVSS 6.8) vulnerability affecting aruba mobility controllers (aruba networks).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aruba mobility controllers aruba_networks	`= 2.3.6.15= 2.5.2.11= 2.5.4.25= 2.5.5.7= 3.1.1.3≤ 2.4.8.11-fips`	No fix yet

Description

Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access.

References

secunia.com/advisories/28357 · Vendor Advisory
securityreason.com/securityalert/3529
arubanetworks.com/support/alerts/aid-122207.asc
securityfocus.com/archive/1/485831/100/0/threaded
securityfocus.com/bid/27144

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free