CVE-2024-31472

9.8CRITICAL

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI

Publicado: 5/14/2024Actualizado: 6/24/2025
Ver en NVDVer en MITRE

Descripción

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Análisis IAImpulsado por IA

Productos Afectados

arubanetworksarubaos
arubanetworksarubaos
hpinstantos
hpinstantos

Referencias