CVEvulnerability
CVE-2024-31478
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-78
Description
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.
Affected configurations
• arubanetworks arubaos (>= 10.3.0.0 < 10.4.1.1)
• arubanetworks arubaos (>= 10.5.0.0 < 10.5.1.1)
• hp instantos (>= 6.4.0.0 < 8.6.0.24)
• hp instantos (>= 8.7.0.0 < 8.10.0.11)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US support.hpe.com
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt Broken Link, Vendor Advisory