CVE-2023-45624 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2023-45624

Analyzed

More Info Official Page

Source-security-alert@hpe.com

Published At-14 Nov, 2023 | 23:15

Updated At-22 Nov, 2023 | 17:15

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

>>arubaos>>Versions from 10.3.0.0(inclusive) to 10.4.0.3(exclusive)

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*

>>arubaos>>10.5.0.0

cpe:2.3:o:arubanetworks:arubaos:10.5.0.0:*:*:*:*:*:*:*

>>instantos>>Versions from 6.4.0.0(inclusive) to 8.6.0.23(exclusive)

cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*

>>instantos>>Versions from 8.10.0.0(inclusive) to 8.10.0.9(exclusive)

cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*

>>instantos>>Versions from 8.11.0.0(inclusive) to 8.11.2.0(exclusive)

cpe:2.3:o:hp:instantos:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt	security-alert@hpe.com	Mitigation Vendor Advisory

Hyperlink: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt

Source: security-alert@hpe.com

Resource:

Mitigation

Vendor Advisory