CVE-2021-34618
https://notcve.org/view.php?id=CVE-2021-34618
A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.4.x: All versions; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Se ha detectado una vulnerabilidad de denegación de servicio (DoS) remota en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 y posteriores; Aruba Instant 6.5.x: 6.5.4.18 y posteriores; Aruba Instant 8.3.x: 8.3.0.14 y posteriores; Aruba Instant 8.4.x: Todas las versiones; Aruba Instant 8.5.x: 8.5.0.11 e inferior; Aruba Instant 8.6.x: 8.6.0.7 e inferior; Aruba Instant 8.7.x: 8.7.1.1 e inferior. Aruba ha publicado parches para Aruba Instant que solucionan esta vulnerabilidad de seguridad • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt •
CVE-2021-34617
https://notcve.org/view.php?id=CVE-2021-34617
A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below; Aruba Instant 8.3.x: 8.3.0.7 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Se ha detectado una vulnerabilidad de tipo cross-site scripting (XSS) remotos en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 y posteriores; Aruba Instant 6.5.x: 6.5.4.13 y posteriores; Aruba Instant 8.3.x: 8.3.0.7 y posteriores; Aruba Instant 8.4.x: 8.4.0.5 y posteriores; Aruba Instant 8.5.x: 8.5.0.0 y posteriores. Aruba ha publicado parches para Aruba Instant que solucionan esta vulnerabilidad de seguridad • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •