← volver
CVE-2024-31466

Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol

CVSS 9.8 CRITICALEPSS 1.1%CWE-121
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.8EPSS 1.1%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
14 may 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →