PT-2024-24110 · Unknown · Soft Ap Daemon

Chancen · Published 2024-05-14 · Updated 2025-06-24 · CVE-2024-31478

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Soft AP daemon (affected versions not specified)

Description The issue concerns multiple unauthenticated Denial-of-Service (DoS) vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these vulnerabilities can interrupt the normal operation of the affected Access Point.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-31478

Affected Products

Soft Ap Daemon

References · 6

• https://osv.dev/vulnerability/CVE-2024-31478 · Vendor Advisory
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31478 · Security Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US · Note
• https://t.me/cvenotify/126508 · Telegram Post
• https://t.me/cvenotify/79790 · Telegram Post