CVE-2024-42394
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected (4)
Products: Arubanetworks: Arubaos · Hp: Instantos
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 10.3.0.0 to 10.4.1.4 | |
| From 6.4.0.0 to 8.10.0.13 |
Related CWEs
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
References (1)
Source: security-alert@hpe.com
Vendor Advisory
Timeline
No history available yet.