Lucene search

[email protected]CVE-2021-25145

HistoryMar 30, 2021 - 12:15 a.m.

CVE-2021-25145

2021-03-3000:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2021-25145

aruba

access point

remote

unauthorized disclosure

vulnerability

security

patch

nvd

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

27.7%

JSON

A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aruba Instant 8.7.x: 8.7.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

CPENameOperatorVersion
arubanetworks:instantarubanetworks instantle6.4.4.8-4.2.4.18
arubanetworks:instantarubanetworks instantlt8.7.1.0
arubanetworks:instantarubanetworks instantlt8.5.0.11
arubanetworks:instantarubanetworks instantlt8.6.0.6
arubanetworks:instantarubanetworks instantlt6.5.4.19
arubanetworks:instantarubanetworks instantlt8.3.0.15
siemens:scalance_w1750d_firmwaresiemens scalance w1750d firmwarelt8.7.1.3

CPE	Name	Operator	Version
arubanetworks:instant	arubanetworks instant	le	6.4.4.8-4.2.4.18
arubanetworks:instant	arubanetworks instant	lt	8.7.1.0
arubanetworks:instant	arubanetworks instant	lt	8.5.0.11
arubanetworks:instant	arubanetworks instant	lt	8.6.0.6
arubanetworks:instant	arubanetworks instant	lt	6.5.4.19
arubanetworks:instant	arubanetworks instant	lt	8.3.0.15
siemens:scalance_w1750d_firmware	siemens scalance w1750d firmware	lt	8.7.1.3

References

cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf

www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt

Social References

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

27.7%

JSON

Related for CVE-2021-25145

cvelist1 prion1 nessus1 ics1