EUVD-2021-24197

Malware in sbrugna...

Siemens SCALANCE Command Injection (CVE-2021-37723)

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE Command Injection (CVE-2021-37718)

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS...

CVE-2021-37723: Improper Neutralization of Special Elements used in a Command

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability...

CVE-2021-37724: Improper Neutralization of Special Elements used in a Command

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability...

PT-2021-21842

Name of the Vulnerable Software and Affected Versions: Aruba Operating System Software versions prior to 8.8.0.1 Aruba Operating System Software version 8.7.1.4 Aruba Operating System Software version 8.6.0.11 Aruba Operating System Software version 8.5.0.13 Description: A remote path traversal...

PT-2021-21845

Name of the Vulnerable Software and Affected Versions: Aruba SD-WAN Software and Gateways versions prior to 8.6.0.0-2.2.0.4 Aruba Operating System Software versions prior to 8.7.1.1 Aruba Operating System Software versions prior to 8.6.0.7 Aruba Operating System Software versions prior to 8.5.0.1...

PT-2021-21835

Name of the Vulnerable Software and Affected Versions: Aruba SD-WAN Software and Gateways versions prior to 8.6.0.4-2.2.0.4 Aruba Operating System Software versions prior to 8.7.1.4 Aruba Operating System Software versions prior to 8.6.0.9 Aruba Operating System Software versions prior to 8.5.0.1...

PT-2021-21831

Name of the Vulnerable Software and Affected Versions: Aruba SD-WAN Software and Gateways versions prior to 8.6.0.4-2.2.0.4 Aruba Operating System Software versions prior to 8.7.1.2 Aruba Operating System Software versions prior to 8.6.0.8 Aruba Operating System Software versions prior to 8.5.0.1...

PT-2021-21847

Name of the Vulnerable Software and Affected Versions: Aruba SD-WAN Software and Gateways versions prior to 8.6.0.4-2.2.0.4 Aruba Operating System Software versions prior to 8.7.1.1 Aruba Operating System Software versions prior to 8.6.0.7 Aruba Operating System Software versions prior to 8.5.0.1...

PT-2021-21839

Name of the Vulnerable Software and Affected Versions: Aruba Operating System Software versions prior to 8.7.1.2 Aruba Operating System Software version 8.6.0.8 Aruba Operating System Software version 8.5.0.12 Aruba Operating System Software version 8.3.0.16 Description: A remote arbitrary comman...

PT-2021-21838

Name of the Vulnerable Software and Affected Versions: Aruba Operating System Software versions prior to 8.7.1.2 Aruba Operating System Software version 8.6.0.8 Aruba Operating System Software version 8.5.0.12 Aruba Operating System Software version 8.3.0.16 Description: A remote arbitrary comman...

CVE-2019-5318: Cross-Site Request Forgery (CSRF)

A remote cross-site request forgery csrf vulnerability was discovered in Aruba Operating System Software versions: 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability...

PT-2021-9119

Name of the Vulnerable Software and Affected Versions Aruba Operating System Software versions 6.x.x.x: all versions Aruba Operating System Software versions 8.x.x.x: all versions prior to 8.8.0.0 Description A remote cross-site request forgery csrf vulnerability was discovered in Aruba Operating...

PT-2021-21840

Name of the Vulnerable Software and Affected Versions: Aruba SD-WAN Software and Gateways versions prior to 8.6.0.4-2.2.0.4 Aruba Operating System Software versions prior to 8.8.0.1 Aruba Operating System Software versions prior to 8.7.1.2 Aruba Operating System Software versions prior to 8.6.0.8...

PT-2021-21833

Name of the Vulnerable Software and Affected Versions: Aruba SD-WAN Software and Gateways versions prior to 8.6.0.4-2.2.0.6 Aruba Operating System Software versions prior to 8.7.1.4 Aruba Operating System Software versions prior to 8.6.0.7 Aruba Operating System Software versions prior to 8.5.0.1...

CVE-2021-37728: Improper Limitation of a Pathname to a Restricted Directory

A remote path traversal vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for ArubaOS that address this security vulnerability...