CVE-2024-47460: fallo crítico en Hewlett Packard Enterprise (HPE) HPE Aruba…
Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9epss 1.4%
Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10CVEs relacionadas — Hewlett Packard Enterprise (HPE) HPE Aruba…
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-42509CRITICALUnauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI ProtocolEPSS 2.0%CVE-2024-47461HIGHAuthenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10EPSS 1.7%CVE-2024-47463HIGHArbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)EPSS 1.2%CVE-2024-47462HIGHArbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)EPSS 1.2%CVE-2024-47464MEDIUMAuthenticated Path Traversal Vulnerability Leads to a Remote Unauthorized Access to FilesEPSS 0.9%