CVE-2024-25615

Published Mar 5, 2024 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-22937 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.
History
Type Values Removed Values Added
CPEs cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Type Values Removed Values Added
First Time appeared Arubanetworks
Arubanetworks arubaos
Arubanetworks sd-wan
Weaknesses CWE-400
CPEs cpe:2.3:a:arubanetworks:sd-wan:8.6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:arubanetworks:sd-wan:8.7.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:10.3.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:10.4.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:10.5.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:6.5.4.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:8.10.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:8.11.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:8.6.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:8.7.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:8.8.0.0:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:8.9.0.0:*:*:*:*:*:*:*
Vendors & Products Arubanetworks
Arubanetworks arubaos
Arubanetworks sd-wan
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
hpe
Published
Updated
Mar 27, 2025, 8:13 PM
Reserved
Feb 8, 2024, 6:08 PM
Status
Analyzed
Published
Mar 5, 2024, 9:15 PM
Modified
Jun 17, 2026, 7:16 AM