CVE-2021-25160

🗓️ 30 Mar 2021 01:42:05Reported by hpeType

A remote arbitrary file modification vulnerability was found in certain Aruba Instant Access Point (IAP) products in various versions

Reporter	Title	Published	Views	Family All 12
0day.today	Aruba Instant (IAP) - Remote Code Execution Exploit	16 Jul 202100:00	–	zdt
Circl	CVE-2021-25160	30 Mar 202106:31	–	circl
CNNVD	Aruba Instant Access Point 输入验证错误漏洞	29 Mar 202100:00	–	cnnvd
CVE	CVE-2021-25160	30 Mar 202101:42	–	cve
NCSC	Vulnerabilities fixed in Siemens SCALANCE W1750D (Aruba Instant Access Points)	11 May 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens Scalance products	10 Aug 202100:00	–	ncsc
NVD	CVE-2021-25160	30 Mar 202102:15	–	nvd
OSV	CVE-2021-25160	30 Mar 202102:15	–	osv
Packet Storm	Aruba Instant (IAP) Remote Code Execution	16 Jul 202100:00	–	packetstorm
Prion	Design/Logic Flaw	30 Mar 202102:15	–	prion

[
  {
    "product": "Aruba Instant Access Points",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 6.5.x: 6.5.4.18 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.3.x: 8.3.0.14 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.5.x: 8.5.0.11 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.6.x: 8.6.0.7 and below"
      },
      {
        "status": "affected",
        "version": "Aruba Instant 8.7.x: 8.7.1.1 and below"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt
packetstormsecurity	www.packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html

16 Jul 2021 16:06Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.07093