Vulnerability Description
There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Arubaos | >= 10.3.0.0, < 10.4.1.1 |
| Hp | Instantos | >= 6.4.0.0, < 8.6.0.24 |
Related Weaknesses (CWE)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocal
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txtBroken LinkVendor Advisory
FAQ
What is CVE-2024-31474?
CVE-2024-31474 is a vulnerability with a CVSS score of 8.2 (HIGH). There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability results in the ability t...
How severe is CVE-2024-31474?
CVE-2024-31474 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-31474?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Arubaos, Hp Instantos.