CVE-2024-42395

EUVD-2024-39599
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
hpeCNA
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
arubanetworksinstant
8.12.0.2 <
𝑥
< 8.12.0.2
arubanetworksinstant
8.10.0.13 <
𝑥
< 8.10.0.13
arubanetworksarubaos
10.3.0.0 ≤
𝑥
< 10.4.1.4
arubanetworksarubaos
10.5.0.0 ≤
𝑥
< 10.6.0.1
hpinstantos
6.4.0.0 ≤
𝑥
< 8.10.0.13
hpinstantos
8.12.0.0 ≤
𝑥
< 8.12.0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04678en_us&docLocale=en_US