CVE-2018-7080

CVE-2018-7080 is a high-severity vulnerability affecting the firmware of embedded BLE radios in certain Aruba Access Points, including the 203R, 203RP, and AP-300 series. An attacker could exploit this by installing malicious firmware on the BLE radio, potentially gaining access to the AP's console port, but only if the BLE radio is enabled (it's disabled by default). The vulnerability has a CVSS score of 7.5 (HIGH) due to its adjacent network attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, though it has garnered some community discussion and media coverage.