5.3
Medium
CVE-2024-42396 Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon…
Description
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | Versions not published | |
| instant 8.12 | 8.12.0.0 → 8.12.0.1 | No fix stated |
| instant 8.10 | 8.10.0.0 → 8.10.0.12 | No fix stated |
Other CVEs of HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
The 5 CVEs of HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 →
CVE-2024-42393
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated…
9.8
Critical
CVE-2024-42394
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated…
9.8
Critical
CVE-2024-42395
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an…
9.8
Critical
CVE-2024-42397
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon…
5.3
Medium