CVE-2024-31470

Summary

CVE-2024-31470 is a buffer overflow vulnerability affecting the SAE (Simultaneous Authentication of Equals) service, which is an underlying component of Aruba's Access Point management protocol. Maliciously crafted packets sent to the PAPI UDP port (8211) can trigger the buffer overflow, potentially allowing unauthenticated attackers to execute arbitrary code on the underlying operating system with privileged access. Successful exploitation could lead to significant security risks, including potential data theft or system takeover.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.