CVE-2024-42395

CRITICAL

AP Certificate Management Service - Unauthenticated RCE

Title source: llm
STIX 2.1

Description

There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

Scores

CVSS v3 9.8
EPSS 0.0027
EPSS Percentile 50.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-295 CWE-787
Status published
Products (2)
arubanetworks/arubaos 10.3.0.0 - 10.4.1.4
hp/instantos 6.4.0.0 - 8.10.0.13
Published Aug 06, 2024
Tracked Since Feb 18, 2026