CVSS 3.1 Score 8.2 of 10 (high)


Published May 14, 2024
Updated: May 15, 2024


CVE-2024-31474 is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI, Aruba's Access Point management protocol. This vulnerability affects various products, including versions v7XvlX, v7XvlW, v7XvlY, and v7X51y. Exploiting this vulnerability allows an attacker to delete arbitrary files on the underlying operating system, potentially disrupting normal operations and compromising the integrity of the affected Access Point. The risk score for this vulnerability is 25, with a base severity of HIGH and a base score of 8.2 according to the CVSS:3.1 vector string. It has a low integrity impact and no confidentiality impact, but poses a high availability impact if exploited successfully. No user interaction or privileges are required for exploitation. It is advised to remediate this vulnerability promptly to avoid potential security breaches and operational disruptions.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-31474 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options