CVE-2024-31469: Buffer Overflow
There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31469?
CVE-2024-31469 has a high severity level due to its potential to allow unauthenticated remote code execution.
How do I fix CVE-2024-31469?
To fix CVE-2024-31469, update to the latest patched version of ArubaOS or HP InstantOS as specified by the vendor.
Which software versions are affected by CVE-2024-31469?
CVE-2024-31469 affects ArubaOS versions 10.3.0.0 to 10.4.1.1 and 10.5.0.0 to 10.5.1.1, as well as HP InstantOS versions 6.4.0.0 to 8.6.0.24 and 8.7.0.0 to 8.10.0.11.
What could happen if CVE-2024-31469 is exploited?
Exploitation of CVE-2024-31469 could lead to unauthorized remote code execution, allowing attackers to take control of affected systems.
Who is responsible for the CVE-2024-31469 vulnerability?
CVE-2024-31469 is a vulnerability in the Central Communications service developed by Aruba Networks and HP.