CVE-2024-31467: Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31467?
CVE-2024-31467 has a high severity rating due to the potential for unauthenticated remote code execution.
How do I fix CVE-2024-31467?
To fix CVE-2024-31467, you should upgrade to the latest patched version of ArubaOS or HP InstantOS as specified in the vendor advisory.
Which software is affected by CVE-2024-31467?
CVE-2024-31467 affects specific versions of ArubaOS and HP InstantOS.
Can CVE-2024-31467 be exploited remotely?
Yes, CVE-2024-31467 can be exploited remotely through specially crafted packets sent to the UDP port 8211.
What type of vulnerability is CVE-2024-31467?
CVE-2024-31467 is categorized as a buffer overflow vulnerability.