Lucene search

PRIOn knowledge basePRION:CVE-2021-25148

HistoryMar 30, 2021 - 12:15 a.m.

Design/Logic Flaw

2021-03-3000:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

8.6 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

33.4%

JSON

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

CPENameOperatorVersion
instantge6.5.0.0
instantlt6.5.4.18
instantge8.3.0.0
instantlt8.3.0.14
instantge8.5.0.0
instantlt8.5.0.11
instantge8.6.0.0
instantlt8.6.0.5
scalance_w1750d_firmwarelt8.7.0

Name	Operator	Version
instant	ge	6.5.0.0
instant	lt	6.5.4.18
instant	ge	8.3.0.0
instant	lt	8.3.0.14
instant	ge	8.5.0.0
instant	lt	8.5.0.11
instant	ge	8.6.0.0
instant	lt	8.6.0.5
scalance_w1750d_firmware	lt	8.7.0

References

cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf

www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

8.6 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

33.4%

JSON

Related for PRION:CVE-2021-25148