Vulnerability Description
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Arubaos | >= 10.3.0.0, < 10.4.1.1 |
| Hp | Instantos | >= 6.4.0.0, < 8.6.0.24 |
Related Weaknesses (CWE)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocal
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txtBroken LinkVendor Advisory
FAQ
What is CVE-2024-31478?
CVE-2024-31478 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to i...
How severe is CVE-2024-31478?
CVE-2024-31478 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-31478?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Arubaos, Hp Instantos.