Known vulnerabilities in Hewlett Packard Enterprise (HPE) AOS-8 Instant and AOS-10 AP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-31483 | An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol | 4.9 Medium | May 14, 2024 |
| CVE-2024-31482 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI… | 5.3 Medium | May 14, 2024 |
| CVE-2024-31481 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol | 5.3 Medium | May 14, 2024 |
| CVE-2024-31480 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol | 5.3 Medium | May 14, 2024 |
| CVE-2024-31479 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the… | 5.3 Medium | May 14, 2024 |
| CVE-2024-31478 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI… | 5.3 Medium | May 14, 2024 |
| CVE-2024-31477 | Multiple authenticated command injection vulnerabilities exist in the command line interface | 7.2 High | May 14, 2024 |
| CVE-2024-31476 | Multiple authenticated command injection vulnerabilities exist in the command line interface | 7.2 High | May 14, 2024 |
| CVE-2024-31475 | There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access… | 8.2 High | May 14, 2024 |
| CVE-2024-31474 | There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management… | 8.2 High | May 14, 2024 |
| CVE-2024-31473 | There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated… | 9.8 Critical | May 14, 2024 |
| CVE-2024-31472 | There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to… | 9.8 Critical | May 14, 2024 |
| CVE-2024-31471 | There is a command injection vulnerability in the underlying Central Communications service that could lead to… | 9.8 Critical | May 14, 2024 |
| CVE-2024-31470 | There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that… | 9.8 Critical | May 14, 2024 |
| CVE-2024-31469 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to… | 9.8 Critical | May 14, 2024 |
| CVE-2024-31468 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to… | 9.8 Critical | May 14, 2024 |
| CVE-2024-31467 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code… | 9.8 Critical | May 14, 2024 |
| CVE-2024-31466 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code… | 9.8 Critical | May 14, 2024 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20