Denial-of-Service Vulnerabilities in Access Points By HPE
CVE-2024-42399
5.3MEDIUM
Key Information:
- Vendor
- HP
- Vendor
- CVE Published:
- 6 August 2024
Summary
The Soft AP daemon utilized by HPE Access Points is susceptible to multiple unauthenticated Denial-of-Service vulnerabilities via the PAPI protocol. Exploitation of these vulnerabilities allows an attacker to disrupt normal operations of the affected Access Points, potentially leading to service interruptions and affected connectivity for users relying on the impacted devices.
Affected Version(s)
HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 Version 8.12.0.0: 8.12.0.1 and below
HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 Version 8.10.0.0: 8.10.0.12 and below
HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 Version 10.6.0.0: 10.6.0.0 and below
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published