CVE-2021-25146

Katalog CVE

CVSS 7.2 · High EPSS 2,7%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada arubanetworks instant, siemens scalance w1750d firmware. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aruba Instant 8.7.x: 8.7.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

Rincian

Terbit di NVD

30 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

2,7% peluang dieksploitasi; lebih tinggi dari 85,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt advisory vendor
• https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf patch · advisory pihak ketiga