CVE-2024-42400
Medium
Published: 06 August 2024
Published
06 August 2024
Modified
23 August 2024
KEV Added
—
Patch
—
CVSS Score v3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.0014
33.8th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2024-42400 is a medium-severity an unspecified weakness vulnerability in Arubanetworks Arubaos. Its CVSS base score is 5.3 (Medium).
Operationally, ranked at the 33.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-39604
Vulnerability details
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
arubanetworks
arubaos
10.6.0.0 · 10.4.0.0 — 10.4.1.2
hp
instantos
8.10.0.0 — 8.10.0.13 · 8.12.0.0 — 8.12.0.2
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.