CVE-2021-25156
Aruba Instant (IAP) - Remote Code Execution
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
Se detectó una vulnerabilidad de creación de directorio arbitrario remoto en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores; Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores; Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores; Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores; Aruba Instant versiones 8.6.x: 8.6.0.6 y anteriores; Aruba Instant versiones 8.7.x: 8.7.1.0 y anteriores. Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-01-14 CVE Reserved
- 2021-03-30 CVE Published
- 2021-07-15 First Exploit
- 2024-07-16 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (4)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/50136 | 2021-07-15 | |
http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html | 2024-08-03 |
URL | Date | SRC |
---|---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf | 2022-04-22 |
URL | Date | SRC |
---|---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt | 2022-04-22 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Siemens Search vendor "Siemens" | Scalance W1750d Firmware Search vendor "Siemens" for product "Scalance W1750d Firmware" | >= 8.7.0 < 8.7.1.3 Search vendor "Siemens" for product "Scalance W1750d Firmware" and version " >= 8.7.0 < 8.7.1.3" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance W1750d Search vendor "Siemens" for product "Scalance W1750d" | - | - |
Safe
|
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 6.4.0.0 <= 6.4.4.8-4.2.4.18 Search vendor "Arubanetworks" for product "Instant" and version " >= 6.4.0.0 <= 6.4.4.8-4.2.4.18" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 6.5.0.0 < 6.5.4.19 Search vendor "Arubanetworks" for product "Instant" and version " >= 6.5.0.0 < 6.5.4.19" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.3.0.0 < 8.3.0.15 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.3.0.0 < 8.3.0.15" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.5.0.0 < 8.5.0.12 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.5.0.0 < 8.5.0.12" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.6.0.0 < 8.6.0.7 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.6.0.0 < 8.6.0.7" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.7.1.0 < 8.7.1.1 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.7.1.0 < 8.7.1.1" | - |
Affected
|