Lucene search

[email protected]CVE-2021-41004

HistoryApr 12, 2022 - 5:15 p.m.

CVE-2021-41004

2022-04-1217:15:08

[email protected]

web.nvd.nist.gov

cve-2021-41004

aruba instant on

remote vulnerability

1930 switch series

firmware below v1.0.7.0

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

Affected configurations

NVD

Node

hpearuba_instant_on_1930_8g_2sfpMatch-

AND

hpearuba_instant_on_1930_8g_2sfp_firmwareRange<1.0.7.0

Node

hpearuba_instant_on_1930_8g_class4_poe_2sfp_124wMatch-

AND

hpearuba_instant_on_1930_8g_class4_poe_2sfp_124w_firmwareRange<1.0.7.0

Node

hpearuba_instant_on_1930_48g_class4_poe_4sfp\/sfp\+_370wMatch-

AND

hpearuba_instant_on_1930_48g_class4_poe_4sfp\/sfp\+_370w_firmwareRange<1.0.7.0

Node

hpearuba_instant_on_1930_48g_4sfp\/sfp\+Match-

AND

hpearuba_instant_on_1930_48g_4sfp\/sfp\+_firmwareRange<1.0.7.0

Node

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_370wMatch-

AND

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_370w_firmwareRange<1.0.7.0

Node

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_195wMatch-

AND

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_195w_firmwareRange<1.0.7.0

Node

hpearuba_instant_on_1930_24g_4sfp\/sfp\+Match-

AND

hpearuba_instant_on_1930_24g_4sfp\/sfp\+_firmwareRange<1.0.7.0

CPENameOperatorVersion
hpe:aruba_instant_on_1930_8g_2sfp_firmwarehpe aruba instant on 1930 8g 2sfp firmwarelt1.0.7.0

CPE	Name	Operator	Version
hpe:aruba_instant_on_1930_8g_2sfp_firmware	hpe aruba instant on 1930 8g 2sfp firmware	lt	1.0.7.0

CNA Affected

[
  {
    "product": "Aruba Instant On 1930 Switch Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware below v1.0.7.0"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Related for CVE-2021-41004

nvd1 prion1 cvelist1