Medium severity5.3NVD Advisory· Published Aug 6, 2024· Updated Jun 17, 2026

CVE-2024-42396

Description

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.

Affected products

HPE/Access Point Certificate Management daemonllm-create
Hewlett Packard Enterprise (HPE)/HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10v5
Range: Version 8.12.0.0: 8.12.0.1 and below
Microfocus/Instantos
cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*
Range: >=8.10.0.0,<8.10.0.13

Patches

Vulnerability mechanics

References

support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000