CVE-2021-25158
Aruba Instant (IAP) - Remote Code Execution
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
Se detectó una vulnerabilidad de lectura remota de archivos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores; Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores; Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores; Aruba Instant versiones 8.6.x: 8.6.0.7 y anteriores; Aruba Instant versiones 8.7.x: 8.7.1.1 y anteriores. Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-01-14 CVE Reserved
- 2021-03-30 CVE Published
- 2021-07-15 First Exploit
- 2024-08-02 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
References (4)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/50136 | 2021-07-15 | |
http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html | 2024-08-03 |
URL | Date | SRC |
---|---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf | 2022-04-22 |
URL | Date | SRC |
---|---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt | 2022-04-22 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Siemens Search vendor "Siemens" | Scalance W1750d Firmware Search vendor "Siemens" for product "Scalance W1750d Firmware" | >= 8.7.0 < 8.7.1.3 Search vendor "Siemens" for product "Scalance W1750d Firmware" and version " >= 8.7.0 < 8.7.1.3" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance W1750d Search vendor "Siemens" for product "Scalance W1750d" | - | - |
Safe
|
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 6.5.0.0 < 6.5.4.19 Search vendor "Arubanetworks" for product "Instant" and version " >= 6.5.0.0 < 6.5.4.19" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.3.0.0 < 8.3.0.15 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.3.0.0 < 8.3.0.15" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.5.0.0 < 8.5.0.12 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.5.0.0 < 8.5.0.12" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.6.0.0 < 8.6.0.8 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.6.0.0 < 8.6.0.8" | - |
Affected
| ||||||
Arubanetworks Search vendor "Arubanetworks" | Instant Search vendor "Arubanetworks" for product "Instant" | >= 8.7.0.0 < 8.7.1.2 Search vendor "Arubanetworks" for product "Instant" and version " >= 8.7.0.0 < 8.7.1.2" | - |
Affected
|