CVE-2024-26303 - Vulnerability Details - OpenCVE

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00091.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt

History

Thu, 31 Oct 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2024-03-26T20:25:44.252Z

Updated: 2024-10-31T15:11:42.444Z

Reserved: 2024-02-16T19:42:43.186Z

Link: CVE-2024-26303

Vulnrichment

Updated: 2024-08-02T00:07:19.028Z

NVD

Status : Awaiting Analysis

Published: 2024-03-26T21:15:52.827

Modified: 2024-11-21T09:02:19.880

Link: CVE-2024-26303

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26303", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2024-02-16T19:42:43.186Z", "datePublished": "2024-03-26T20:25:44.252Z", "dateUpdated": "2024-10-31T15:11:42.444Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "ArubaOS-S Switch", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [{"status": "affected", "version": "ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0015 and below"}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC - All versions. "}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: WB.16.10.24 and below. "}, {"status": "affected", "version": "ArubaOS-Switch 16.09.xxxx: All versions. "}, {"status": "affected", "version": "ArubaOS-Switch 16.08.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.07.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.06.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.05.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0027 and below"}, {"status": "affected", "version": "ArubaOS-Switch 16.03.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.02.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.01.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 15.xx.xxxx: All versions"}]}], "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Adrian Weiss"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon</p>"}], "value": "Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2024-03-26T20:25:44.252Z"}, "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:07:19.028Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-02T16:05:57.893181Z", "id": "CVE-2024-26303", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-31T15:11:42.444Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26303", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2024-02-16T19:42:43.186Z", "datePublished": "2024-03-26T20:25:44.252Z", "dateUpdated": "2024-10-31T15:11:42.444Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "ArubaOS-S Switch", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [{"status": "affected", "version": "ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0015 and below"}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC - All versions. "}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: WB.16.10.24 and below. "}, {"status": "affected", "version": "ArubaOS-Switch 16.09.xxxx: All versions. "}, {"status": "affected", "version": "ArubaOS-Switch 16.08.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.07.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.06.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.05.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0027 and below"}, {"status": "affected", "version": "ArubaOS-Switch 16.03.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.02.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 16.01.xxxx: All versions"}, {"status": "affected", "version": "ArubaOS-Switch 15.xx.xxxx: All versions"}]}], "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Adrian Weiss"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon</p>"}], "value": "Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2024-03-26T20:25:44.252Z"}, "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:07:19.028Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26303", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-02T16:05:57.893181Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-02T16:06:02.556Z"}}]}}