CVE-2024-42394: There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation…

PriorityP268critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.60%

44.2th percentile

There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	arubaos	>= 10.3.0.0 < 10.4.1.4	10.4.1.4
arubanetworks	arubaos	>= 10.5.0.0 < 10.6.0.1	10.6.0.1
hewlett_packard_enterprise	hpe_aruba_networking_instantos_and_aruba_access_points_running_arubaos_10	Version 8.10.0.0: 8.10.0.12 and below – <=8.10.0.12	—
hewlett_packard_enterprise	hpe_aruba_networking_instantos_and_aruba_access_points_running_arubaos_10	Version 8.12.0.0: 8.12.0.1 and below – <=8.12.0.1	—
hp	instantos	>= 6.4.0.0 < 8.10.0.13	8.10.0.13
hp	instantos	>= 8.12.0.0 < 8.12.0.2	8.12.0.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.