Hp Instantos vulnerabilities

CVE-2023-45621 [HIGH] CWE-400 CVE-2023-45621: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PA Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.

CVE-2023-45622 [HIGH] CWE-400 CVE-2023-45622: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.

CVE-2023-45623 [HIGH] CVE-2023-45623: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed v Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.

CVE-2024-31482 [HIGH] CWE-78 CVE-2024-31482: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service acce An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.

CVE-2023-22787 [HIGH] CVE-2023-22787: An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI p An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.

CVE-2024-31480 [HIGH] CWE-78 CVE-2024-31480: Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PA Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.

CVE-2024-31479 [HIGH] CWE-78 CVE-2024-31479: Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.

CVE-2024-31481 [HIGH] CWE-78 CVE-2024-31481: Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PA Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.

CVE-2024-31483 [MEDIUM] CVE-2024-31483: An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed v An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.

CVE-2023-45627 [MEDIUM] CVE-2023-45627: An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploit An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.

CVE-2024-42398 [MEDIUM] CWE-400 CVE-2024-42398: Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accesse Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

CVE-2024-42400 [MEDIUM] CVE-2024-42400: Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accesse Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

CVE-2024-42399 [MEDIUM] CWE-400 CVE-2024-42399: Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accesse Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

CVE-2024-42396 [MEDIUM] CVE-2024-42396: Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Managem Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

CVE-2024-42397 [MEDIUM] CWE-400 CVE-2024-42397: Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Managem Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

CVE-2023-22791 [MEDIUM] CVE-2023-22791: A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network c A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in which this disclosure of potentially sensitive information can oc