CVE-2024-31479

CVSS 5.3 MEDIUMEPSS 0.6%CWE-78

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 May 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Hewlett Packard Enterprise (HPE) · AOS-8 Instant and AOS-10 AP

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt