CVE-2024-31474: arubanetworks arubaos Deletion of Data Structure Sentinel
Vulnerability summary
CVE-2024-31474 is a high (CVSS 8.2) Deletion of Data Structure Sentinel vulnerability in arubanetworks arubaos. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.6% of scored vulnerabilities.
Timeline
- 14-05-2024PublishedVulnerability first disclosed.
- 24-06-2025Last modifiedVulnerability information updated.
Description
There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST8.2HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.45% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Arubanetworks1 product
- arubaos≥ 10.3.0.0, < 10.4.1.1 | ≥ 10.5.0.0, < 10.5.1.1
Hewlett packard enterprise (hpe)1 product
- aos-8 instant and aos-10 ap≥ 10.5.0.0, ≤ 10.5.1.0 | ≥ 10.4.0.0, ≤ 10.4.1.0 | ≥ 8.11.0.0, ≤ 8.11.2.1 | ≥ 8.10.0.0, ≤ 8.10.0.10 | ≥ 8.6.0.0, ≤ 8.6.0.23
Hp1 product
- instantos≥ 6.4.0.0, < 8.6.0.24 | ≥ 8.7.0.0, < 8.10.0.11
3 vendors · 3 products