CVE-2024-31478

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-31478
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt Broken Link Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*
History

24 Jun 2025, 15:15

Type Values Removed Values Added
Summary (en) Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point. (en) Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.
References
  • () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US -
References () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt - Vendor Advisory, Broken Link () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt - Broken Link, Vendor Advisory

05 Jun 2025, 15:25

Type Values Removed Values Added
First Time Arubanetworks arubaos
Hp instantos
Arubanetworks
Hp
CPE cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
References () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt - () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt - Vendor Advisory, Broken Link

21 Nov 2024, 09:13

Type Values Removed Values Added
References () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt - () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt -

03 Jul 2024, 01:55

Type Values Removed Values Added
CWE CWE-78
Summary
  • (es) Existen múltiples vulnerabilidades de denegación de servicio (DoS) no autenticadas en el daemon Soft AP al que se accede a través del protocolo PAPI. La explotación exitosa de estas vulnerabilidades da como resultado la capacidad de interrumpir el funcionamiento normal del punto de acceso afectado.

14 May 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 23:15

Updated : 2025-06-24 15:15

NVD link : CVE-2024-31478

Mitre link : CVE-2024-31478

CVE.ORG link : CVE-2024-31478

JSON object : View

Products Affected

hp

  • instantos

arubanetworks

  • arubaos
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')