CVE-2024-25615 — Uncontrolled Resource Consumption in Arubaos

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 84.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Arubanetworks ArubaosHewlett Packard Enterprise Arubaos Wi-fi Controllers AND Campus Remote Access Points
Timeline
PublishedMar 5

Description

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDarubanetworks/arubaos8.10.0.0 — 8.10.0.10+3

🔴Vulnerability Details

2
GHSA
GHSA-54wh-fwqq-m49j: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8↗2024-03-05
▶
CVEList
CVE-2024-25615: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8↗2024-03-05
▶
CVE-2024-25615 — Uncontrolled Resource Consumption | cvebase