CVE-2024-42507: Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42507?
CVE-2024-42507 has a critical severity rating due to its potential to allow unauthenticated remote code execution.
How do I fix CVE-2024-42507?
To fix CVE-2024-42507, ensure that you update your Aruba Access Points to the latest patched version provided by Aruba.
What systems are affected by CVE-2024-42507?
CVE-2024-42507 affects Aruba Access Points that utilize the PAPI UDP protocol on port 8211.
Can CVE-2024-42507 be exploited remotely?
Yes, CVE-2024-42507 can be exploited remotely by sending specially crafted packets to the vulnerable service.
Is authentication required to exploit CVE-2024-42507?
No, exploitation of CVE-2024-42507 does not require authentication, making it particularly dangerous.