CVE-2024-31470
Published: 14 May 2024
Summary
CVE-2024-31470 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Arubanetworks Arubaos. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 11.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-31470 is a stack-based buffer overflow (CWE-121) in the SAE service used by Aruba wireless infrastructure. The flaw resides in the handling of the PAPI management protocol and can be triggered over UDP port 8211, allowing unauthenticated remote code execution on the underlying operating system with privileged rights. The vulnerability carries a CVSS 3.1 score of 9.8.
An attacker with network reachability to the PAPI port can send specially crafted packets that overflow the buffer and execute arbitrary code without authentication or user interaction. Successful exploitation grants full control of the affected access point or controller.
Public advisories from HPE and Aruba (ARUBA-PSA-2024-006) describe the issue and direct customers to the corresponding security bulletin for patch information. The EPSS score rose from a low baseline to a peak of 0.0736 on 2025-12-11 before receding to the current value of 0.0402, indicating a period of increased exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-29350
Vulnerability details
There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211).…
more
Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.