EUVD-2024-29348

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Buffer overflow vulnerabilities in Central Communications service allow remote code execution via PAPI UDP port.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-31468	24 Jun 202513:50	–	circl
CNNVD	Aruba Networks ArubaOS 和 InstantOS 安全漏洞	14 May 202400:00	–	cnnvd
CVE	CVE-2024-31468	14 May 202422:24	–	cve
Cvelist	CVE-2024-31468	14 May 202422:24	–	cvelist
NCSC	Vulnerabilities fixed in Aruba Networks ArubaOS	16 May 202412:41	–	ncsc
NVD	CVE-2024-31468	14 May 202423:15	–	nvd
OSV	CVE-2024-31468	14 May 202423:15	–	osv
Positive Technologies	PT-2024-24099 · Aruba · Aruba Central Communications Service	14 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-31468	5 Feb 202500:27	–	redhatcve
Vulnrichment	CVE-2024-31468	14 May 202422:24	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "4418184e-c8d0-3f24-95a4-5081dc1d7642",
        "vendor": {
          "name": "Hewlett Packard Enterprise (HPE)"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "364392fe-c48b-3387-8ef1-5c3aef9336c7",
        "product": {
          "name": "Aruba InstantOS and Aruba Access Points running ArubaOS 10"
        },
        "product_version": "InstantOS or ArubaOS (access points) 10.5.x.x: 10.5.1.0 and below."
      },
      {
        "id": "6fd387eb-ab87-3e2e-94ba-9aa343b9ad2d",
        "product": {
          "name": "Aruba InstantOS and Aruba Access Points running ArubaOS 10"
        },
        "product_version": "InstantOS or ArubaOS (access points) 8.6.x.x: 8.6.0.23 and below."
      },
      {
        "id": "80e8f2e5-8810-3473-b9e0-aebedbdb27d7",
        "product": {
          "name": "Aruba InstantOS and Aruba Access Points running ArubaOS 10"
        },
        "product_version": "InstantOS or ArubaOS (access points) 8.10.x.x: 8.10.0.10 and below."
      },
      {
        "id": "a1286e3e-d938-3f96-989e-85a99bc44511",
        "product": {
          "name": "Aruba InstantOS and Aruba Access Points running ArubaOS 10"
        },
        "product_version": "InstantOS or ArubaOS (access points) 8.11.x.x: 8.11.2.1 and below."
      },
      {
        "id": "c8697aec-05d5-3bd0-a804-6aa7b1143c2e",
        "product": {
          "name": "Aruba InstantOS and Aruba Access Points running ArubaOS 10"
        },
        "product_version": "InstantOS or ArubaOS (access points) 10.4.x.x: 10.4.1.0 and below."
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.8

EPSS0.01615

SSVC