CVE-2024-25616

LOW
Published Mar 5, 2024 Modified Jul 28, 2025

Description

Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.

Is your site exposed to CVE-2024-25616?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

3.7
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor Product
arubanetworks arubaos
arubanetworks arubaos
arubanetworks arubaos
arubanetworks arubaos

References

Frequently Asked Questions

What is CVE-2024-25616? +
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers. It has a CVSS v3.1 base score of 3.7 (LOW).
How severe is CVE-2024-25616? +
CVE-2024-25616 has a CVSS v3.1 score of 3.7 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.
What products are affected by CVE-2024-25616? +
CVE-2024-25616 affects products from arubanetworks, specifically: arubaos. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-25616? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-31470 9.8

There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated …
CVE-2024-31467 9.8

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending …
CVE-2024-31469 9.8

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by …
CVE-2024-31468 9.8

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by …
CVE-2024-31466 9.8

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending …
CVE-2024-31471 9.8

There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-25616 — free, no signup required.