{"id":"CVE-2024-31478","state":"PUBLISHED","title":"Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result","description":"Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.","publishedAt":"2024-05-14T22:32:51.129Z","updatedAt":"2025-06-24T15:01:43.100Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"hpe"},"assigner":"hpe","products":["Hewlett Packard Enterprise (HPE) AOS-8 Instant and AOS-10 AP"],"affected":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-8 Instant and AOS-10 AP","defaultStatus":"unaffected","versions":[{"version":"10.5.0.0","status":"affected","lessThanOrEqual":"10.5.1.0","versionType":"semver"},{"version":"10.4.0.0","status":"affected","lessThanOrEqual":"10.4.1.0","versionType":"semver"},{"version":"8.11.0.0","status":"affected","lessThanOrEqual":"8.11.2.1","versionType":"semver"},{"version":"8.10.0.0","status":"affected","lessThanOrEqual":"8.10.0.10","versionType":"semver"},{"version":"8.6.0.0","status":"affected","lessThanOrEqual":"8.6.0.23","versionType":"semver"}]}],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US","https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt"],"weaknesses":["CWE-78"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/31xxx/CVE-2024-31478.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-31478","state":"PUBLISHED","datePublished":"2024-05-14T22:32:51.129Z","dateUpdated":"2025-06-24T15:01:43.100Z","assignerShortName":"hpe","assignerOrgId":"eb103674-0d28-4225-80f8-39fb86215de0","dateReserved":"2024-04-03T21:21:22.897Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point."}],"affected":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-8 Instant and AOS-10 AP","defaultStatus":"unaffected","versions":[{"version":"10.5.0.0","status":"affected","lessThanOrEqual":"10.5.1.0","versionType":"semver"},{"version":"10.4.0.0","status":"affected","lessThanOrEqual":"10.4.1.0","versionType":"semver"},{"version":"8.11.0.0","status":"affected","lessThanOrEqual":"8.11.2.1","versionType":"semver"},{"version":"8.10.0.0","status":"affected","lessThanOrEqual":"8.10.0.10","versionType":"semver"},{"version":"8.6.0.0","status":"affected","lessThanOrEqual":"8.6.0.23","versionType":"semver"}]}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"providerMetadata":{"shortName":"hpe","orgId":"eb103674-0d28-4225-80f8-39fb86215de0","dateUpdated":"2025-06-24T15:01:43.100Z"},"credits":[{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Chancen"}],"source":{"advisory":"HPESBNW04647","discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"arubanetworks","product":"arubaos","defaultStatus":"unknown","versions":[{"version":"10.5.0.0","status":"affected","lessThanOrEqual":"10.5.1.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:arubaos:10.5.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"arubaos","defaultStatus":"unknown","versions":[{"version":"10.4.0.0","status":"affected","lessThanOrEqual":"10.4.1.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:arubaos:10.4.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.10.0.0","status":"affected","lessThanOrEqual":"8.10.0.10","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.10.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.11.0.0","status":"affected","lessThanOrEqual":"8.11.2.1","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.11.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.6.0.0","status":"affected","lessThanOrEqual":"8.6.0.23","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.6.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"arubaos","defaultStatus":"unknown","versions":[{"version":"10.3.0.0","status":"affected","lessThan":"10.4.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:arubaos:10.3.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.9.0.0","status":"affected","lessThan":"8.10.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.9.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.8.0.0","status":"affected","lessThan":"8.9.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.8.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.5.0.0","status":"affected","lessThan":"8.6.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.5.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.7.0.0","status":"affected","lessThan":"8.8.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.7.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.4.0.0","status":"affected","lessThan":"8.5.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.4.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"6.5.0.0","status":"affected","lessThan":"6.6.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:6.5.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"6.4.0.0","status":"affected","lessThan":"6.5.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:6.4.0.0:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-05-15T13:41:22.094004Z","id":"CVE-2024-31478","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","type":"CWE","lang":"en","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-06T17:00:19.275Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T01:52:57.134Z"}}]}}}