CVE-2024-42393

CRITICAL

Soft AP Daemon Service - Unauthenticated RCE

Title source: llm

Description

There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

Scores

CVSS v3 9.8
EPSS 0.0047
EPSS Percentile 64.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-94 CWE-787
Status published
Products (2)
arubanetworks/arubaos 10.3.0.0 - 10.4.1.4
hp/instantos 6.4.0.0 - 8.10.0.13
Published Aug 06, 2024
Tracked Since Feb 18, 2026