Skip to content
Sign in
9.8 Critical

CVE-2024-31467 There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code…

Description

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Affected products and versions

Product Affected versions Fixed in
AOS-8 Instant and AOS-10 AP 10.5 10.5.0.0 → 10.5.1.0 No fix stated
AOS-8 Instant and AOS-10 AP 10.4 10.4.0.0 → 10.4.1.0 No fix stated
AOS-8 Instant and AOS-10 AP 8.11 8.11.0.0 → 8.11.2.1 No fix stated
AOS-8 Instant and AOS-10 AP 8.10 8.10.0.0 → 8.10.0.10 No fix stated
AOS-8 Instant and AOS-10 AP 8.6 8.6.0.0 → 8.6.0.23 No fix stated
arubaos 10.3 10.3.0.0 → < 10.4.0.0 10.4.0.0
instant 6.4 6.4.0.0 → < 6.5.0.0 6.5.0.0

Other CVEs of AOS-8 Instant and AOS-10 AP

The 18 CVEs of AOS-8 Instant and AOS-10 AP →
CVE-2024-31483 An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol 4.9 Medium CVE-2024-31482 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI… 5.3 Medium CVE-2024-31481 Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol 5.3 Medium CVE-2024-31480 Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol 5.3 Medium
Track this CVE