VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Mar 5, 2024· Updated Jun 17, 2026

CVE-2024-25615

CVE-2024-25615

Description

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.

Affected products

4
  • Arubanetworks/Arubaos2 versions
    cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=8.10.0.0,<8.10.0.10
    • (no CPE)range: 8.x
  • Arubanetworks/Spectrum servicellm-create
    Range: 8.x
  • Hewlett Packard Enterprise (HPE)/ArubaOS Wi-Fi Controllers and Campus/Remote Access Pointsv5
    Range: ArubaOS 10.5.x.x: 10.5.0.1 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.