Lucene search

CVE-2024-31472

🗓️ 14 May 2024 23:10:15Reported by hpeType

Command injection vulnerabilities in Soft AP Daemon service allowing unauthenticated remote code execution via specially crafted packets to PAPI UDP port (8211)

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2024-31472	14 May 202422:28	–	cvelist
Vulnrichment	CVE-2024-31472	14 May 202422:28	–	vulnrichment
NVD	CVE-2024-31472	14 May 202423:15	–	nvd

[
  {
    "defaultStatus": "affected",
    "product": "Aruba InstantOS and Aruba Access Points running ArubaOS 10",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "InstantOS or ArubaOS (access points) 10.5.x.x: 10.5.1.0 and below."
      },
      {
        "status": "affected",
        "version": "InstantOS or ArubaOS (access points) 10.4.x.x: 10.4.1.0 and below."
      },
      {
        "status": "affected",
        "version": "InstantOS or ArubaOS (access points) 8.11.x.x: 8.11.2.1 and below."
      },
      {
        "status": "affected",
        "version": "InstantOS or ArubaOS (access points) 8.10.x.x: 8.10.0.10 and below."
      },
      {
        "status": "affected",
        "version": "InstantOS or ArubaOS (access points) 8.6.x.x: 8.6.0.23 and below."
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2024 23:15Current

8.8High risk

Vulners AI Score8.8

CVSS39.8

EPSS0.00043

SSVC

CWE-78