VDB
CVE-2024-42397
CVE-2024-42397
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.
EPSS 0.27% · 18.5th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.27%
18.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | Version 8.12.0.0: 8.12.0.1 and below, Version 8.10.0.0: 8.10.0.12 and below |
| hp | instantos | 8.10.0.0, 8.12.0.0 |
Timeline
- Aug 6, 2024 CVE Published
- Aug 6, 2024 PoC Published
- Aug 13, 2024 EPSS Score
- Sep 3, 2024 EPSS Score
- Sep 25, 2024 EPSS Score
- Oct 16, 2024 EPSS Score
- Nov 7, 2024 EPSS Score
- Nov 28, 2024 EPSS Score
- Dec 20, 2024 EPSS Score
- Jan 11, 2025 EPSS Score
- Feb 1, 2025 EPSS Score
- Feb 22, 2025 EPSS Score
References
- https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbgn04674.txt advisory
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04678en_us&docLocale=en_US url
- https://nvd.nist.gov/vuln/detail/CVE-2024-42397 advisory
- https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04678.txt advisory