HiveOS Matrix

[samantha_lynn]

[samantha_lynn]

Hi Tran, I can help you with this if you can email me the APs serial number. My email address is communityhelp@aerohive.com.

[tatekvietnam]

i have ap370 and added this ap in to cloud trial,but over 30 days trial, now i want remove this ap but i can't, pls can help me? , thanks you .

[samantha_lynn]

You'd want to reach out to security@aerohive.com to see if we have any patches for that vulnerability.

[blake]

We have encountered heap overflow vulnerabilities on the current recommended firmware (10.0r7a) according to this matrix from August. Is there a newer version? I cannot access the matrix in other links either due to access errors. Is there some reason not to make this a public resource and to keep it behind lock and key?

NVT Name

CERN httpd CGI name heap overflow

Summary

It was possible to kill the remote web server by requesting GET /cgi-bin/A.AAAA[...]A HTTP/1.0 This is known to trigger a heap overflow in some servers like CERN HTTPD.

Affected Nodes

*.*.*.*, *.*.*.*

Impact

A cracker may use this flaw to disrupt your server. It *might* also be exploitable to run malicious code on the machine.

Solution

Ask your vendor for a patch or move to another server.

Vulnerability Detection Result

Vulnerability was detected according to the Vulnerability Detection Method.

Vulnerability Detection Method

Details:

CERN httpd CGI name heap overflow

(OID: 1.3.6.1.4.1.25623.1.0.17231)

Version used: 2019-04-24T07:26:10+0000

[samantha_lynn]

Just to add to what Ashley said, HMOL is for Classic, HM Cloud is for HiveManager (formerly NG). This guide will walk you through how to determine which HiveManager you are using, for reference: https://thehivecommunity.aerohive.com/s/article/Which-HiveManager-Platform-am-I-using