PT-2024-24116 · Hewlett Packard+1 · Aos-8 Instant/Aos-10 Ap+4

Chancen · Published 2024-05-14 · Updated 2024-05-15 · CVE-2024-31483

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description An authenticated sensitive information disclosure issue exists in the CLI service accessed via the PAPI protocol. This allows successful exploitation to result in the ability to read arbitrary files in the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-31483

Affected Products

Aos-8 Instant/Aos-10 Ap

Aruba Instantos/Aruba Access Points Running Arubaos 10

Arubaos

Instant

Instantos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-31483 · Security Note
• https://osv.dev/vulnerability/CVE-2024-31483 · Vendor Advisory
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt · Vendor Advisory
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US · Note
• https://t.me/cvenotify/79795 · Telegram Post