CVE-2024-42396 PUBLISHED CVSS 5.300000190734863 MEDIUM

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

EPSS 0.10% · 27.7th percentile

Risk Scores

CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.10%
27.7th percentile

Affected Products

VendorProductVersions
Hewlett Packard Enterprise (HPE)HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10Version 8.12.0.0: 8.12.0.1 and below, Version 8.10.0.0: 8.10.0.12 and below
arubanetworksinstant8.10.0.0, 8.12.0.0
hpinstantos8.10.0.0, 8.12.0.0

Timeline

References

Open in Interactive Console →