CVE-2024-26303

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
Hewlett Packard Enterprise (HPE)ArubaOS-S SwitchArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0015 and below; ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC - All versions.; ArubaOS-Switch 16.10.xxxx: WB.16.10.24 and below.; ArubaOS-Switch 16.09.xxxx: All versions.; ArubaOS-Switch 16.08.xxxx: All versions.; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0027 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 15.xx.xxxx: All versions

References

Timeline

Published
Mar 26, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-263049.8There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code executionCVE-2024-263059.8There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendinCVE-2024-263065.9iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption CVE-2024-263075.3Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of someone renaming theCVE-2024-263085.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: frCVE-2024-263097.5Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unauthenticated attacker cCVE-2024-26314.3Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HCVE-2024-263104.3Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability. A remote authenticated malicious user couldCVE-2024-263115.7Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user couCVE-2024-263124.3Archer Platform 6 before 2024.03 contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtaCVE-2024-263135.4Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicCVE-2024-263147.8Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary co
CVE-2024-26303: Medium severity, CVSS 4.9 | Vulnix