4.9
Medium
CVE-2024-31483 An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol
Description
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AOS-8 Instant and AOS-10 AP 10.5 | 10.5.0.0 → 10.5.1.0 | No fix stated |
| AOS-8 Instant and AOS-10 AP 10.4 | 10.4.0.0 → 10.4.1.0 | No fix stated |
| AOS-8 Instant and AOS-10 AP 8.11 | 8.11.0.0 → 8.11.2.1 | No fix stated |
| AOS-8 Instant and AOS-10 AP 8.10 | 8.10.0.0 → 8.10.0.10 | No fix stated |
| AOS-8 Instant and AOS-10 AP 8.6 | 8.6.0.0 → 8.6.0.23 | No fix stated |
| arubaos 10.3 | 10.3.0.0 → < 10.4.0.0 | 10.4.0.0 |
| instant 6.4 | 6.4.0.0 → < 6.5.0.0 | 6.5.0.0 |
Other CVEs of AOS-8 Instant and AOS-10 AP
The 18 CVEs of AOS-8 Instant and AOS-10 AP →
CVE-2024-31482
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI…
5.3
Medium
CVE-2024-31481
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol
5.3
Medium
CVE-2024-31480
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol
5.3
Medium
CVE-2024-31479
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the…
5.3
Medium