critical9.8
CVE-2024-42395
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack.
Impact
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Arubaos | from 10.3.0.0 before 10.4.1.4 from 10.5.0.0 before 10.6.0.1 |
| Hp | Instantos | from 6.4.0.0 before 8.10.0.13 from 8.12.0.0 before 8.12.0.2 |