CVE-2024-42395
EUVD-2024-3959906.08.2024, 19:15
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | arubaos | 10.3.0.0 ≤ 𝑥 < 10.4.1.4 |
| arubanetworks | arubaos | 10.5.0.0 ≤ 𝑥 < 10.6.0.1 |
| hp | instantos | 6.4.0.0 ≤ 𝑥 < 8.10.0.13 |
| hp | instantos | 8.12.0.0 ≤ 𝑥 < 8.12.0.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| arubanetworks | instant | 8.12.0.0 ≤ 𝑥 < 8.12.0.2 | ADP |
| arubanetworks | instant | 8.10.0.0 ≤ 𝑥 < 8.10.0.13 | ADP |
Common Weakness Enumeration