Unauth DoS in Soft AP Daemon via PAPI Prevents AP Functionality
CVE-2024-42400 Published on August 6, 2024

Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

NVD

Vulnerability Analysis

CVE-2024-42400 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a small impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
LOW

Products Associated with CVE-2024-42400

stack.watch emails you whenever new vulnerabilities are published in Aruba Networks Arubaos or HP Instantos. Just hit a watch button to start following.

Aruba Networks Arubaos
 
HP Instantos
 

Affected Versions

Hewlett Packard Enterprise HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10: arubanetworks arubaos: arubanetworks arubaos: arubanetworks instant: arubanetworks instant: arubanetworks arubaos: arubanetworks arubaos: arubanetworks instant: arubanetworks instant: arubanetworks instant: arubanetworks instant:

Exploit Probability

EPSS
0.14%
Percentile
33.99%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.