CVE-2024-31478

CVE-2024-31478 describes multiple unauthenticated Denial-of-Service (DoS) vulnerabilities in the Soft AP daemon (accessed via the PAPI protocol) affecting Aruba Networks ArubaOS/InstantOS. Successful exploitation can interrupt the normal operation of the affected Access Point. The connected advis...

CVE-2024-31475

There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI Aruba's access point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to...

CVE-2024-31475

There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI Aruba's access point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to...

CVE-2024-31475

CVE-2024-31475 affects ArubaOS/InstantOS with an arbitrary file deletion vulnerability in the Central Communications service accessed via PAPI. The issue allows deletion of arbitrary files on the underlying OS, impacting availability and integrity; CVSS 3.1 base score 8.2 (HIGH). Remediation (per...

CVE-2024-31474

There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI Aruba's Access Point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...

CVE-2024-31474

There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI Aruba's Access Point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...

CVE-2024-31474

Summary: CVE-2024-31474 is an arbitrary file deletion vulnerability in the CLI service accessed by Aruba’s PAPI protocol used on ArubaOS/InstantOS Aruba Access Points. The vulnerability allows deletion of arbitrary files on the underlying OS, potentially interrupting normal operation and impactin...

CVE-2024-31473

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of this...

CVE-2024-31473

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of this...

CVE-2024-31469

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of these...

CVE-2024-31466

CVE-2024-31466 describes unauthenticated buffer-overflow vulnerabilities in the PAPI CLI service used by ArubaOS/InstantOS, exploitable by sending specially crafted UDP packets to port 8211. Successful exploitation could execute arbitrary code with OS privileges. Affected products include ArubaOS...

PT-2024-24098 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point versions affected versions not specified Description: The issue concerns buffer overflow vulnerabilities in the underlying CLI service. These vulnerabilities could lead to unauthenticated remote code execution by sending...

PT-2024-24097 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in the underlying CLI service. These vulnerabilities could lead to unauthenticated remote code execution by sending...

PT-2024-24107 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point affected versions not specified Description: The issue is related to an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI Aruba's access point management protocol. Successful...

PT-2024-24110 · Unknown · Soft Ap Daemon

Name of the Vulnerable Software and Affected Versions: Soft AP daemon affected versions not specified Description: The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these...

PT-2024-24105 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point affected versions not specified Description: The issue is related to a command injection vulnerability in the deauthentication service. This could lead to unauthenticated remote code execution by sending specially crafted...

PT-2024-24102 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point versions affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the SAE service, which could lead to unauthenticated remote code execution. This can be achieved by sending...

PT-2024-24106 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point affected versions not specified Description: The issue concerns an arbitrary file deletion vulnerability in the CLI service accessed by PAPI, which is Aruba's Access Point management protocol. Successful exploitation of thi...

PT-2024-24115 · Unknown · Access Point

Name of the Vulnerable Software and Affected Versions: Access Point affected versions not specified Description: An unauthenticated Denial-of-Service DoS vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this issue results in the abili...

Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24417)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...