CVE-2021-37735

CWE-134 — Uncontrolled Format String3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.3%
top 42.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Arubanetworks Aruba InstantSiemens Scalance W1750d Firmware
Timeline
PublishedOct 12
Latest updateMay 24

Description

A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.10 and below; Aruba Instant 8.6.x.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶NVDarubanetworks/aruba_instant6.5.4.0 — 6.5.4.18+2
▶CVEListV5hpe_aruba_instant_(iap)Aruba Instant 6.5.x.x: 6.5.4.18 and below, Aruba Instant 8.5.x.x: 8.5.0.10 and below, Aruba Instant 8.6.x.x: 8.6.0.4 and below+2

Patches

Patch: cert-portal.siemens.com ↗Patch: cert-portal.siemens.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rmrh-j6wx-6f69: A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6↗2022-05-24
▶
CVEList
CVE-2021-37735: A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6↗2021-10-12
▶