CVEvulnerability
CVE-2024-31482
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-78
Description
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.
Affected configurations
• arubanetworks arubaos (>= 10.3.0.0 < 10.4.1.1)
• arubanetworks arubaos (>= 10.5.0.0 < 10.5.1.1)
• hp instantos (>= 6.4.0.0 < 8.6.0.24)
• hp instantos (>= 8.7.0.0 < 8.10.0.11)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US support.hpe.com
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt Broken Link, Vendor Advisory