CVE-2024-42399 (GCVE-0-2024-42399)

Vulnerability from cvelistv5 – Published: 2024-08-06 19:48 – Updated: 2025-03-13 13:37
VLAI?
Summary
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.
Severity ?
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE
  • CWE-400 - Uncontrolled Resource Consumption
Assigner
hpe
References
Impacted products
Vendor Product Version
Hewlett Packard Enterprise HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 Affected: Version 8.12.0.0: 8.12.0.1 and below , ≤ <=8.12.0.1 (semver)
Affected: Version 8.10.0.0: 8.10.0.12 and below , ≤ <=8.10.0.12 (semver)
Affected: Version 10.6.0.0: 10.6.0.0 and below , ≤ <=10.6.0.0 (semver)
Affected: Version 10.4.0.0: 10.4.1.3 and below , ≤ <=10.4.1.3 (semver)
Create a notification for this product.
Credits
zzcentury from Ubisectech Sirius Team (https://www.ubisectech.com/)
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:arubaos:10.6.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "arubaos",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "10.6.0.1",
                "status": "affected",
                "version": "10.6.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:arubaos:10.4.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "arubaos",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "10.4.1.2",
                "status": "affected",
                "version": "10.4.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:instant:8.12.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "instant",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "8.12.0.2",
                "status": "affected",
                "version": "8.12.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:instant:8.10.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "instant",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "8.10.0.13",
                "status": "affected",
                "version": "8.10.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:arubaos:10.5.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "arubaos",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "10.6.0.0",
                "status": "affected",
                "version": "10.5.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:arubaos:10.3.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "arubaos",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "10.4.0.0",
                "status": "affected",
                "version": "10.3.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:instant:8.11.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "instant",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "8.12.0.0",
                "status": "affected",
                "version": "8.11.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:instant:8.7.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "instant",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "8.10.0.0",
                "status": "affected",
                "version": "8.7.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:instant:8.4.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "instant",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "8.6.0.0",
                "status": "affected",
                "version": "8.4.0.0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:arubanetworks:instant:6.4.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "instant",
            "vendor": "arubanetworks",
            "versions": [
              {
                "lessThan": "6.6.0.0",
                "status": "affected",
                "version": "6.4.0.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42399",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T20:27:21.784664Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T13:37:13.997Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10",
          "vendor": "Hewlett Packard Enterprise",
          "versions": [
            {
              "lessThanOrEqual": "\u003c=8.12.0.1",
              "status": "affected",
              "version": "Version 8.12.0.0: 8.12.0.1 and below",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "\u003c=8.10.0.12",
              "status": "affected",
              "version": "Version 8.10.0.0: 8.10.0.12 and below",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "\u003c=10.6.0.0",
              "status": "affected",
              "version": "Version 10.6.0.0: 10.6.0.0 and below",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "\u003c=10.4.1.3",
              "status": "affected",
              "version": "Version 10.4.0.0: 10.4.1.3 and below",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "zzcentury from Ubisectech Sirius Team (https://www.ubisectech.com/)"
        }
      ],
      "datePublic": "2024-08-06T19:24:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point."
            }
          ],
          "value": "Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T19:48:07.255Z",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04678en_us\u0026docLocale=en_US"
        }
      ],
      "source": {
        "advisory": "HPESBNW04678",
        "discovery": "EXTERNAL"
      },
      "title": "Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2024-42399",
    "datePublished": "2024-08-06T19:48:07.255Z",
    "dateReserved": "2024-07-31T20:37:28.338Z",
    "dateUpdated": "2025-03-13T13:37:13.997Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.4.0.0\", \"versionEndExcluding\": \"10.4.1.2\", \"matchCriteriaId\": \"3BB98F67-A6E1-43B3-BB2E-3700523FAC75\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:arubaos:10.6.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"11DB90E9-0029-4B54-91AA-8C4D7347F423\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"8.10.0.0\", \"versionEndExcluding\": \"8.10.0.13\", \"matchCriteriaId\": \"E15B0E06-2E55-4AE2-A4F4-91433F58DD24\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"8.12.0.0\", \"versionEndExcluding\": \"8.12.0.2\", \"matchCriteriaId\": \"BD98FE10-885C-4631-B68B-34E8CC227A59\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.\"}, {\"lang\": \"es\", \"value\": \"Existen m\\u00faltiples vulnerabilidades de denegaci\\u00f3n de servicio (DoS) no autenticadas en el daemon Soft AP al que se accede a trav\\u00e9s del protocolo PAPI. La explotaci\\u00f3n exitosa de estas vulnerabilidades da como resultado la capacidad de interrumpir el funcionamiento normal del punto de acceso afectado.\"}]",
      "id": "CVE-2024-42399",
      "lastModified": "2024-08-23T15:06:13.350",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"security-alert@hpe.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 1.4}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 1.4}]}",
      "published": "2024-08-06T20:15:40.717",
      "references": "[{\"url\": \"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04678en_us\u0026docLocale=en_US\", \"source\": \"security-alert@hpe.com\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "security-alert@hpe.com",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-42399\",\"sourceIdentifier\":\"security-alert@hpe.com\",\"published\":\"2024-08-06T20:15:40.717\",\"lastModified\":\"2025-03-13T14:15:30.960\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.\"},{\"lang\":\"es\",\"value\":\"Existen m\u00faltiples vulnerabilidades de denegaci\u00f3n de servicio (DoS) no autenticadas en el daemon Soft AP al que se accede a trav\u00e9s del protocolo PAPI. La explotaci\u00f3n exitosa de estas vulnerabilidades da como resultado la capacidad de interrumpir el funcionamiento normal del punto de acceso afectado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-alert@hpe.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.4.0.0\",\"versionEndExcluding\":\"10.4.1.2\",\"matchCriteriaId\":\"3BB98F67-A6E1-43B3-BB2E-3700523FAC75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:arubaos:10.6.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11DB90E9-0029-4B54-91AA-8C4D7347F423\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.10.0.0\",\"versionEndExcluding\":\"8.10.0.13\",\"matchCriteriaId\":\"E15B0E06-2E55-4AE2-A4F4-91433F58DD24\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.12.0.0\",\"versionEndExcluding\":\"8.12.0.2\",\"matchCriteriaId\":\"BD98FE10-885C-4631-B68B-34E8CC227A59\"}]}]}],\"references\":[{\"url\":\"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04678en_us\u0026docLocale=en_US\",\"source\":\"security-alert@hpe.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-42399\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-08-06T20:27:21.784664Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:o:arubanetworks:arubaos:10.6.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"arubaos\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.6.0.0\", \"lessThan\": \"10.6.0.1\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:arubaos:10.4.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"arubaos\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.4.0.0\", \"lessThan\": \"10.4.1.2\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:instant:8.12.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"instant\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.12.0.0\", \"lessThan\": \"8.12.0.2\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:instant:8.10.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"instant\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.10.0.0\", \"lessThan\": \"8.10.0.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:arubaos:10.5.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"arubaos\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.5.0.0\", \"lessThan\": \"10.6.0.0\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:arubaos:10.3.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"arubaos\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.3.0.0\", \"lessThan\": \"10.4.0.0\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:instant:8.11.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"instant\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.11.0.0\", \"lessThan\": \"8.12.0.0\", \"versionType\": \"semver\"}], \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:instant:8.7.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"instant\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.7.0.0\", \"lessThan\": \"8.10.0.0\", \"versionType\": \"semver\"}], \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:instant:8.4.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"instant\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.4.0.0\", \"lessThan\": \"8.6.0.0\", \"versionType\": \"semver\"}], \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:2.3:o:arubanetworks:instant:6.4.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"arubanetworks\", \"product\": \"instant\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.4.0.0\", \"lessThan\": \"6.6.0.0\", \"versionType\": \"semver\"}], \"defaultStatus\": \"affected\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-400\", \"description\": \"CWE-400 Uncontrolled Resource Consumption\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-08-06T20:27:00.809Z\"}}], \"cna\": {\"title\": \"Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol\", \"source\": {\"advisory\": \"HPESBNW04678\", \"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"zzcentury from Ubisectech Sirius Team (https://www.ubisectech.com/)\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Hewlett Packard Enterprise\", \"product\": \"HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10\", \"versions\": [{\"status\": \"affected\", \"version\": \"Version 8.12.0.0: 8.12.0.1 and below\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"\u003c=8.12.0.1\"}, {\"status\": \"affected\", \"version\": \"Version 8.10.0.0: 8.10.0.12 and below\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"\u003c=8.10.0.12\"}, {\"status\": \"affected\", \"version\": \"Version 10.6.0.0: 10.6.0.0 and below\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"\u003c=10.6.0.0\"}, {\"status\": \"affected\", \"version\": \"Version 10.4.0.0: 10.4.1.3 and below\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"\u003c=10.4.1.3\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2024-08-06T19:24:00.000Z\", \"references\": [{\"url\": \"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04678en_us\u0026docLocale=en_US\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"eb103674-0d28-4225-80f8-39fb86215de0\", \"shortName\": \"hpe\", \"dateUpdated\": \"2024-08-06T19:48:07.255Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-42399\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-13T13:37:13.997Z\", \"dateReserved\": \"2024-07-31T20:37:28.338Z\", \"assignerOrgId\": \"eb103674-0d28-4225-80f8-39fb86215de0\", \"datePublished\": \"2024-08-06T19:48:07.255Z\", \"assignerShortName\": \"hpe\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.