Lucene search
K

CVE-2021-25155

🗓️ 30 Mar 2021 00:13:23Reported by hpeType 
cve
 cve
🔗 web.nvd.nist.gov👁 143 Views🌐 WEB

Remote arbitrary file modification vulnerability in Aruba Instant Access Point (IAP) products

Related
Detection
Affected
Refs
Paths
NVD
Node
arubanetworksinstantRange6.4.0.06.4.4.8-4.2.4.18
OR
arubanetworksinstantRange6.5.0.06.5.4.19
OR
arubanetworksinstantRange8.3.0.08.3.0.15
OR
arubanetworksinstantRange8.5.0.08.5.0.12
OR
arubanetworksinstantRange8.6.0.08.6.0.7
OR
arubanetworksinstantRange8.7.0.08.7.1.1
[
  {
    "product": "Aruba Instant Access Points",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 6.5.x: 6.5.4.18 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.3.x: 8.3.0.14 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.5.x: 8.5.0.11 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.6.x: 8.6.0.6 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.7.x: 8.7.1.0 and below"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
opcoderequest bodyswarm.cgiAruba Instant PAPI login/config modification via POST to swarm.cgi (credentials and session).
userrequest bodyswarm.cgiAruba Instant PAPI login/config modification via POST to swarm.cgi (credentials and session).
passwdrequest bodyswarm.cgiAruba Instant PAPI login/config modification via POST to swarm.cgi (credentials and session).
refreshrequest bodyswarm.cgiAruba Instant PAPI login/config modification via POST to swarm.cgi (credentials and session).
opcoderequest bodyswarm.cgiAruba Instant PAPI remote command/config change via POST to swarm.cgi (directory creation/command execution).
iprequest bodyswarm.cgiAruba Instant PAPI remote command/config change via POST to swarm.cgi (directory creation/command execution).
cmdrequest bodyswarm.cgiAruba Instant PAPI remote command/config change via POST to swarm.cgi (directory creation/command execution).
refreshrequest bodyswarm.cgiAruba Instant PAPI remote command/config change via POST to swarm.cgi (directory creation/command execution).
sidrequest bodyswarm.cgiAruba Instant PAPI remote command/config change via POST to swarm.cgi (directory creation/command execution).
nocacherequest bodyswarm.cgiAruba Instant PAPI remote command/config change via POST to swarm.cgi (directory creation/command execution).
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:54Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.16.5
CVSS 28.5
EPSS0.0868
143