CVE-2024-42506

Summary

CVE-2024-42506 identifies command injection vulnerabilities in Aruba's Access Point management protocol (PAPI) that could allow unauthenticated remote code execution by sending specially crafted packets to UDP port 8211. Affected products include various models such as y57tpn, y5k4ua, and ys6oP series devices. The exploitation of this vulnerability can lead to arbitrary code execution with privileged user access on the underlying operating system, posing a critical risk to organizational security. The CVSS score for this vulnerability is 9.8, indicating high severity with significant impacts on confidentiality, integrity, and availability. Remediation steps are recommended through HPE's security advisory documents to mitigate these vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.