CVE-2024-31482 | THREATINT

Assigner	hpe
Reserved	2024-04-03
Published	2024-05-14
Updated	2024-08-02

Description

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.

MEDIUM: 5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Product status

Default status

affected

InstantOS or ArubaOS (access points) 10.5.x.x: 10.5.1.0 and below.

affected

InstantOS or ArubaOS (access points) 10.4.x.x: 10.4.1.0 and below.

affected

InstantOS or ArubaOS (access points) 8.11.x.x: 8.11.2.1 and below.

affected

InstantOS or ArubaOS (access points) 8.10.x.x: 8.10.0.10 and below.

affected

InstantOS or ArubaOS (access points) 8.6.x.x: 8.6.0.23 and below.

affected

Credits

Chancen 0x40078a68d0

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt

cve.org CVE-2024-31482

nvd.nist.gov CVE-2024-31482

Download JSON