CVE-2023-22787
Unauthenticated Denial of Service (DoS) in Aruba InstantOS or ArubaOS 10 Service Accessed via the PAPI Protocol
- Published
- Updated
- Reserved
- Assigned by
- hpe
Description
An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.
Timeline
ID reserved
By hpe
- 4 months later
· 4 months later
Published
- 21 months later
· 21 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| hpeCNA (assigner) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.84% · top 42% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
- n/a
- CWE-noinfo Not enough information
Affected products
Hewlett Packard Enterprise (HPE) · Aruba Access Points running InstantOS and ArubaOS 10
- affected Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below
- affected Aruba InstantOS 6.5.x: 6.5.4.23 and below
- affected Aruba InstantOS 8.6.x: 8.6.0.19 and below
- affected Aruba InstantOS 8.10.x: 8.10.0.4 and below
- affected ArubaOS 10.3.x: 10.3.1.0 and below
- affected See reference document for further details
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-22787)Record last updated .