Vulnerabilities > HP > Instantos > 8.3.0.5

DATE CVE VULNERABILITY TITLE RISK
2024-08-06 CVE-2024-42393 Out-of-bounds Write vulnerability in multiple products
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack.
network
low complexity
hp arubanetworks CWE-787
critical
9.8
2024-08-06 CVE-2024-42394 Out-of-bounds Write vulnerability in multiple products
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack.
network
low complexity
hp arubanetworks CWE-787
critical
9.8
2024-08-06 CVE-2024-42395 Out-of-bounds Write vulnerability in multiple products
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack.
network
low complexity
hp arubanetworks CWE-787
critical
9.8
2024-05-14 CVE-2024-31467 There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
network
low complexity
arubanetworks hp
critical
9.8
2024-05-14 CVE-2024-31468 There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
network
low complexity
arubanetworks hp
critical
9.8
2024-05-14 CVE-2024-31469 There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
network
low complexity
arubanetworks hp
critical
9.8
2024-05-14 CVE-2024-31470 There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
network
low complexity
arubanetworks hp
critical
9.8
2024-05-14 CVE-2024-31471 There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
network
low complexity
arubanetworks hp
critical
9.8
2024-05-14 CVE-2024-31472 There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
network
low complexity
arubanetworks hp
critical
9.8
2024-05-14 CVE-2024-31473 There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).
network
low complexity
arubanetworks hp
critical
9.8