Skip to content
Sign in
9.8 Critical

CVE-2024-42393 There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated…

Description

There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

Affected products and versions

Product Affected versions Fixed in
HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 Versions not published
instant 8.12 8.12.0.0 → 8.12.0.1 No fix stated
instant 8.10 8.10.0.0 → 8.10.0.12 No fix stated

Other CVEs of HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10

The 5 CVEs of HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 →
CVE-2024-42394 There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated… 9.8 Critical CVE-2024-42395 There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an… 9.8 Critical CVE-2024-42396 Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon… 5.3 Medium CVE-2024-42397 Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon… 5.3 Medium
Track this CVE