CVE-2024-42399

CVE-2024-42399 corresponds to multiple unauthenticated DoS vulnerabilities in the Soft AP daemon accessed via the PAPI protocol on Aruba Networks devices (ArubaOS/InstantOS). Exploitation is network-based with no authentication and can interrupt normal AP operation, per NVD/Aruba advisories. The ...

CVE-2024-42398 Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-42398 Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-42397

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-42396

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-42396 Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the AP Certificate Management Service Accessed by the PAPI Protocol

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-42397

CVE-2024-42397 describes unauthenticated DoS vulnerabilities in the AP Certificate Management daemon over PAPI on Aruba Networks’ InstantOS/ArubaOS. The underlying issue enables disruption of normal operation of affected APs. Exploitation is network-based with low attack complexity and none privi...

PT-2024-29924 · Hewlett Packard · Hpe Aruba Instant +1

Name of the Vulnerable Software and Affected Versions: HPE Aruba InstantOS/ArubaOS affected versions not specified Description: The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the AP Certificate Management daemon, which is accessed via the PAPI protocol...

PT-2024-29925 · Unknown · Soft Ap Daemon

Name of the Vulnerable Software and Affected Versions: Soft AP daemon affected versions not specified Description: The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these...

PT-2024-25061 · Qualcomm · Snapdragon +181

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing SCAN RNR IE. This happens when the size of the last parameter of IE ...

[SECURITY] Fedora 40 Update: hostapd-2.11-1.fc40

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backen...

TOTOLINK CA300-PoE Buffer Overflow Vulnerability

TOTOLINK CA300-PoE is a wireless access point from China's Gion Electronics TOTOLINK. The TOTOLINK CA300-PoE suffers from a buffer overflow vulnerability, which originates from the password parameter in the loginauth function of the /cgi-bin/cstecgi.cgi page that fails to correctly validate the...

PT-2024-29996 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba's Access Point affected versions not specified Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI...

PT-2024-29997 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point versions affected versions not specified Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the...

The vulnerability of the modifyDhcpRule function in the /goform/modifyDhcpRule software for the Tenda G3 wireless access point allows a hacker to execute arbitrary code.

The vulnerability of the modifyDhcpRule function in the /goform/modifyDhcpRule microprogramming system for the Tenda G3 wireless access point is related to buffer overflow based on a stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POS...

CVE-2024-37380

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point Version 6.6.65 and earlier Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later...

CVE-2024-37380

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point Version 6.6.65 and earlier Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later...

CVE-2024-37380

CVE-2024-37380 affects UniFi U6+ Access Point (versions ≤ 6.6.65). The root cause is a misconfiguration that could cause VLAN traffic to be forwarded incorrectly among APs meshed to the U6+. Impact described as VLAN traffic forwarding issues; exploit details are not provided in the documents. Rec...

CVE-2024-37380

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point Version 6.6.65 and earlier Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later...

D-Link DAP-1325 Command Injection Vulnerability (CNVD-2024-33900)

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...