CVE-2021-25155

Katalog CVE

CVSS 6.5 · Medium EPSS 12,4%

Kerentanan pada arubanetworks instant, siemens scalance w1750d firmware. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

Rincian

Terbit di NVD

30 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

12,4% peluang dieksploitasi; lebih tinggi dari 96,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt advisory vendor
• https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf patch · advisory pihak ketiga
• http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/163524/Aruba-Instant-8.7.1.0-Arbitrary-File-Modification.html advisory pihak ketiga · vdb entry