CVE-2024-31476

Description

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Reserved 2024-04-03 | Published 2024-05-14 | Updated 2024-08-02 | Assigner hpe

Product status

Default status
affected

InstantOS or ArubaOS (access points) 10.5.x.x: 10.5.1.0 and below.
affected

InstantOS or ArubaOS (access points) 10.4.x.x: 10.4.1.0 and below.
affected

InstantOS or ArubaOS (access points) 8.11.x.x: 8.11.2.1 and below.
affected

InstantOS or ArubaOS (access points) 8.10.x.x: 8.10.0.10 and below.
affected

InstantOS or ArubaOS (access points) 8.6.x.x: 8.6.0.23 and below.
affected

Credits

Chancen reporter

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt

cve.org (CVE-2024-31476)

nvd.nist.gov (CVE-2024-31476)

Download JSON