CVE-2024-31473: Command Injection
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31473?
CVE-2024-31473 is classified as a high severity vulnerability due to its potential for unauthenticated remote code execution.
How do I fix CVE-2024-31473?
To fix CVE-2024-31473, upgrade to the latest version of ArubaOS or HP InstantOS that addresses this vulnerability.
Which versions are affected by CVE-2024-31473?
CVE-2024-31473 affects specific versions of ArubaOS and HP InstantOS within defined version ranges.
What kind of attacks can exploit CVE-2024-31473?
CVE-2024-31473 can be exploited through command injection attacks by sending specially crafted packets to the PAPI UDP port.
Is CVE-2024-31473 easy to exploit?
Yes, CVE-2024-31473 is considered easy to exploit, requiring only the ability to send specially crafted packets to the affected services.