CVE-2024-33513
Medium
Published: 01 May 2024
Published
01 May 2024
Modified
28 July 2025
KEV Added
—
Patch
—
CVSS Score v3.1
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.0012
30.5th percentile
Risk Priority
12
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2024-33513 is a medium-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Arubanetworks Arubaos. Its CVSS base score is 5.9 (Medium).
Operationally, ranked at the 30.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-31251
Vulnerability details
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
arubanetworks
arubaos
8.10.0.0 — 8.10.0.10 · 8.11.0.0 — 8.11.2.1 · 10.4.0.0 — 10.4.1.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.