CVE-2024-42395: AP Cert Mgmt Service Unauth RCE
CVE-2024-42395 Published on August 6, 2024
Unauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the AP Certificate Management Service Accessed by the PAPI Protocol
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Vulnerability Analysis
CVE-2024-42395 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Improper Certificate Validation
The software does not validate, or incorrectly validates, a certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.
Products Associated with CVE-2024-42395
stack.watch emails you whenever new vulnerabilities are published in HP Instantos or Aruba Networks Arubaos. Just hit a watch button to start following.
Affected Versions
Hewlett Packard Enterprise (HPE) HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10:- Version Version 8.12.0.0: 8.12.0.1 and below, <= <=8.12.0.1 is affected.
- Version Version 8.10.0.0: 8.10.0.12 and below, <= <=8.10.0.12 is affected.
- Version 8.12.0.0 and below 8.12.0.2 is affected.
- Version 8.10.0.0 and below 8.10.0.13 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.