{"id":"CVE-2024-31480","state":"PUBLISHED","title":"Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the abil","description":"Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.","publishedAt":"2024-05-14T22:34:42.949Z","updatedAt":"2025-06-24T15:19:49.638Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"hpe"},"assigner":"hpe","products":["Hewlett Packard Enterprise (HPE) AOS-8 Instant and AOS-10 AP"],"affected":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-8 Instant and AOS-10 AP","defaultStatus":"unaffected","versions":[{"version":"10.5.0.0","status":"affected","lessThanOrEqual":"10.5.1.0","versionType":"semver"},{"version":"10.4.0.0","status":"affected","lessThanOrEqual":"10.4.1.0","versionType":"semver"},{"version":"8.11.0.0","status":"affected","lessThanOrEqual":"8.11.2.1","versionType":"semver"},{"version":"8.10.0.0","status":"affected","lessThanOrEqual":"8.10.0.10","versionType":"semver"},{"version":"8.6.0.0","status":"affected","lessThanOrEqual":"8.6.0.23","versionType":"semver"}]}],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US","https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt"],"weaknesses":["CWE-78"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/31xxx/CVE-2024-31480.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-31480","state":"PUBLISHED","datePublished":"2024-05-14T22:34:42.949Z","dateUpdated":"2025-06-24T15:19:49.638Z","assignerShortName":"hpe","assignerOrgId":"eb103674-0d28-4225-80f8-39fb86215de0","dateReserved":"2024-04-03T21:21:22.898Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service."}],"affected":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-8 Instant and AOS-10 AP","defaultStatus":"unaffected","versions":[{"version":"10.5.0.0","status":"affected","lessThanOrEqual":"10.5.1.0","versionType":"semver"},{"version":"10.4.0.0","status":"affected","lessThanOrEqual":"10.4.1.0","versionType":"semver"},{"version":"8.11.0.0","status":"affected","lessThanOrEqual":"8.11.2.1","versionType":"semver"},{"version":"8.10.0.0","status":"affected","lessThanOrEqual":"8.10.0.10","versionType":"semver"},{"version":"8.6.0.0","status":"affected","lessThanOrEqual":"8.6.0.23","versionType":"semver"}]}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"providerMetadata":{"shortName":"hpe","orgId":"eb103674-0d28-4225-80f8-39fb86215de0","dateUpdated":"2025-06-24T15:19:49.638Z"},"credits":[{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Chancen"}],"source":{"advisory":"HPESBNW04647","discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"arubanetworks","product":"arubaos","defaultStatus":"unknown","versions":[{"version":"10.5.0.0","status":"affected","lessThanOrEqual":"10.5.1.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:arubaos:10.5.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"arubaos","defaultStatus":"unknown","versions":[{"version":"10.4.0.0","status":"affected","lessThanOrEqual":"10.4.1.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:arubaos:10.4.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.10.0.0","status":"affected","lessThanOrEqual":"8.10.0.10","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.10.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.11.0.0","status":"affected","lessThanOrEqual":"8.11.2.1","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.11.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.6.0.0","status":"affected","lessThanOrEqual":"8.6.0.23","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.6.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"arubaos","defaultStatus":"unknown","versions":[{"version":"10.3.0.0","status":"affected","lessThan":"10.4.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:arubaos:10.3.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.9.0.0","status":"affected","lessThan":"8.10.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.9.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.8.0.0","status":"affected","lessThan":"8.9.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.8.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.5.0.0","status":"affected","lessThan":"8.6.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.5.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.7.0.0","status":"affected","lessThan":"8.8.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.7.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"8.4.0.0","status":"affected","lessThan":"8.5.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:8.4.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"6.5.0.0","status":"affected","lessThan":"6.6.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:6.5.0.0:*:*:*:*:*:*:*"]},{"vendor":"arubanetworks","product":"instant","defaultStatus":"unknown","versions":[{"version":"6.4.0.0","status":"affected","lessThan":"6.5.0.0","versionType":"custom"}],"cpes":["cpe:2.3:o:arubanetworks:instant:6.4.0.0:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-05-15T13:42:01.200373Z","id":"CVE-2024-31480","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","type":"CWE","lang":"en","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-06T17:01:00.228Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T01:52:57.134Z"}}]}}}