Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-25615 EUVD-2024-22937GHSA-54wh-fwqq-m49j

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Succ…

Published Mar 5, 2024 · Updated Mar 27, 2025 · Assigned by hpe

Description

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS Wi-Fi Controllers and Campus/Remote Access Points ArubaOS 10.5.x.x: 10.5.0.1 and below, ArubaOS 10.4.x.x: 10.4.0.3 and below, ArubaOS 8.11.x.x: 8.11.2.0 and below, ArubaOS 8.10.x.x: 8.10.0.9 and below —

Advisories 1

References