Unauthenticated Remote Code Execution Vulnerability in Central Communications
CVE-2024-31471

9.8CRITICAL

Key Information:

Vendor
HP
Status
Aruba Instantos And Aruba Access Points Running Arubaos 10
Vendor
CVE Published:
14 May 2024

Badges

📰 News Worthy

Summary

A command injection vulnerability exists within the Central Communications service of Aruba Networks, which can potentially allow for unauthenticated remote code execution. The vulnerability arises from the handling of specifically crafted packets sent to the PAPI (Aruba's Access Point management protocol) over UDP port 8211. If exploited, this vulnerability could enable attackers to execute arbitrary code with elevated privileges on the underlying operating system. Organizations utilizing Aruba's solutions should evaluate their systems immediately to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Aruba InstantOS and Aruba Access Points running ArubaOS 10 InstantOS or ArubaOS (access points) 10.5.x.x: 10.5.1.0 and below.

Aruba InstantOS and Aruba Access Points running ArubaOS 10 InstantOS or ArubaOS (access points) 10.5.x.x: 10.5.1.0 and below.

Aruba InstantOS and Aruba Access Points running ArubaOS 10 InstantOS or ArubaOS (access points) 10.4.x.x: 10.4.1.0 and below.

News Articles

favicon imageprophaze.com

CVE-2024-31471 : ARUBA INSTANTOS/ARUBAOS CENTRAL COMMUNICATONS SERVICE COMMAND INJECTION - Cloud WAF

CVE-2024-31471 : There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).

8 months ago

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by prophaze.com

  • Vulnerability published

  • Vulnerability Reserved

Credit

Erik De Jong (bugcrowd.com/erikdejong
.