CVE-2024-31475

There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Arubas access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point.

Weakness

The accidental deletion of a data-structure sentinel can cause serious programming logic problems.

Potential Mitigations

• Run or compile the software using features or extensions that automatically provide a protection mechanism that mitigates or eliminates buffer overflows.
• For example, certain compilers and extensions provide automatic buffer overflow detection mechanisms that are built into the compiled code. Examples include the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice.

References

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txt