CVE-2024-31476

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
Hewlett Packard Enterprise (HPE)AOS-8 Instant and AOS-10 AP>= 10.5.0.0, <= 10.5.1.0; >= 10.4.0.0, <= 10.4.1.0; >= 8.11.0.0, <= 8.11.2.1; >= 8.10.0.0, <= 8.10.0.10; >= 8.6.0.0, <= 8.6.0.23
arubanetworksarubaos>= 10.5.0.0, <= 10.5.1.0
arubanetworksarubaos>= 10.4.0.0, <= 10.4.1.0
arubanetworksinstant>= 8.10.0.0, <= 8.10.0.10
arubanetworksinstant>= 8.11.0.0, <= 8.11.2.1
arubanetworksinstant>= 8.6.0.0, <= 8.6.0.23
arubanetworksarubaos>= 10.3.0.0, < 10.4.0.0
arubanetworksinstant>= 8.9.0.0, < 8.10.0.0
arubanetworksinstant>= 8.8.0.0, < 8.9.0.0
arubanetworksinstant>= 8.5.0.0, < 8.6.0.0
arubanetworksinstant>= 8.7.0.0, < 8.8.0.0
arubanetworksinstant>= 8.4.0.0, < 8.5.0.0
arubanetworksinstant>= 6.5.0.0, < 6.6.0.0
arubanetworksinstant>= 6.4.0.0, < 6.5.0.0

References

Timeline

Published
May 14, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-314778.8Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilitiCVE-2024-314787.5Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful expCVE-2024-314797.5Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. SuccessfCVE-2024-31488.8A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the fileCVE-2024-314807.5Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of CVE-2024-314817.5Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of CVE-2024-314827.5An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful eCVE-2024-314836.5An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitCVE-2024-314847.8A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/CommunicatiCVE-2024-314857.2A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1CVE-2024-314865.3A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without suCVE-2024-314876.5A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4,