9.8
Critical
CVE-2024-42394 There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated…
Description
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | Versions not published | |
| aruba_networking_instantos 8.12 | earliest → 8.12.0.1 | No fix stated |
| aruba_networking_instantos 8.10 | earliest → 8.10.0.12 | No fix stated |
| arubaos 8.12 | earliest → 8.12.0.1 | No fix stated |
| arubaos 8.10 | earliest → 8.10.0.12 | No fix stated |
Other CVEs of HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
The 5 CVEs of HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 →
CVE-2024-42393
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated…
9.8
Critical
CVE-2024-42395
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an…
9.8
Critical
CVE-2024-42396
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon…
5.3
Medium
CVE-2024-42397
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon…
5.3
Medium