CVEvulnerability
CVE-2024-31479
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-78
Description
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
Affected configurations
• arubanetworks arubaos (>= 10.3.0.0 < 10.4.1.1)
• arubanetworks arubaos (>= 10.5.0.0 < 10.5.1.1)
• hp instantos (>= 6.4.0.0 < 8.6.0.24)
• hp instantos (>= 8.7.0.0 < 8.10.0.11)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US support.hpe.com
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt Broken Link, Vendor Advisory