Arbitrary File Deletion Vulnerability in Central Communications Could Disrupt Access Point Operations

CVE-2024-31475

Summary

An arbitrary file deletion vulnerability exists within Aruba Networks' Central Communications service, which can be accessed via the PAPI (Access Point Management Protocol). This vulnerability allows attackers with the required access to delete files on the underlying operating system of affected devices. Such unauthorized deletions could disrupt normal operations and compromise the integrity and reliability of Aruba Access Points. It is imperative for users of affected products to review their configurations, apply necessary patches, and adopt security practices to mitigate potential risks associated with this vulnerability.

References