CVE-2021-25149
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
Se detectó una vulnerabilidad de desbordamiento de búfer remoto en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores; Aruba Instant versiones 6.5.x: 6.5.4.16 y anteriores; Aruba Instant versiones 8.3.x: 8.3.0.12 y anteriores; Aruba Instant versiones 8.5.x: 8.5.0.6 y anteriores; Aruba Instant versiones 8.6.x: 8.6.0.2 y anteriores. Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-01-14 CVE Reserved
- 2021-03-29 CVE Published
- 2023-12-13 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf | 2022-06-04 |
URL | Date | SRC |
---|---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt | 2022-06-04 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Siemens Search vendor "Siemens" | Scalance W1750d Firmware Search vendor "Siemens" for product "Scalance W1750d Firmware" | < 8.7.0 Search vendor "Siemens" for product "Scalance W1750d Firmware" and version " < 8.7.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance W1750d Search vendor "Siemens" for product "Scalance W1750d" | - | - |
Safe
|
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 6.4.0.0 <= 6.4.4.8-4.2.4.18 Search vendor "Arubanetworks" for product "Instant" and version " >= 6.4.0.0 <= 6.4.4.8-4.2.4.18" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 6.5.0.0 < 6.5.4.17 Search vendor "Arubanetworks" for product "Instant" and version " >= 6.5.0.0 < 6.5.4.17" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.3.0.0 < 8.3.0.13 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.3.0.0 < 8.3.0.13" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.5.0.0 < 8.5.0.7 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.5.0.0 < 8.5.0.7" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.6.0.0 < 8.6.0.3 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.6.0.0 < 8.6.0.3" | - |
Affected
|