CVE-2024-31478 MEDIUM

CVE-2024-31478

Vendor Hewlett Packard Enterprise (Hpe)
Product AOS-8 Instant and AOS-10 AP
Published May 14, 2024
Last update June 24, 2025

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.

Key dates

02Disclosure timeline

May 14, 2024 CVE published
June 24, 2025 Record updated