ArubaOS 8.13.2.0 Smurf Amplification & ICMP Reflection: Pre-Auth Attack via Missing uRPF (HPE Bug Bounty)
A 28-year-old vulnerability class — Smurf amplification — alive in an enterprise controller shipping in 2026. Two independent packet captures prove reflection. Bugcrowd called it expected behavior. No fix issued.
