CVE-2024-31476

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Score

CVSS 3.1 8.8 High

Status

Modified - security-alert@hpe.com

Published

2024-05-14

Last modified

2025-06-24

Weaknesses

CWE-78

Affected products

• Arubaos (Arubanetworks)
• Instant (Arubanetworks)
• Aos-8 Instant And Aos-10 Ap (Hewlett Packard Enterprise Hpe)
• Instantos (Hp)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocale=en_US
• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt