CVE-2024-42398mediumCWE-400

CVE-2024-42398: medium-severity vulnerability in Hewlett Packard Enterprise HPE Aruba…

Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol

Published · Updated

Follow this CVE+ Monitor HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.4%
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Hewlett Packard Enterprise · HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
Related CVEs — Hewlett Packard Enterprise HPE Aruba…

In the same product, most dangerous first.

CVE-2024-42400MEDIUMUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolEPSS 0.4%CVE-2024-42399MEDIUMUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolEPSS 0.4%