CVE-2024-33516

published 2024-05-01

CVE-2024-33516: An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation…

Priority P3 39 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	arubaos	10.4.0.0 – 10.4.1.0	—
arubanetworks	arubaos	10.5.0.0 – 10.5.1.0	—
arubanetworks	arubaos	8.10.0.0 – 8.10.0.10	—
arubanetworks	arubaos	8.11.0.0 – 8.11.2.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-121