The vulnerability of the Cisco Jabber for Windows software platform lies in insufficient input data validation, which allows attackers to escalate their privileges, access confidential information, intercept secure network traffic, or cause service failures.

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, access confidential information, intercept secure network traffic, or cause service...

Aruba Instant Denial of Service Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant has a denial of service vulnerability that can be exploited by an attacker to cause a system reboot via the PAPI protocol, which can lead to a denial of service...

Aruba Instant Command Injection Vulnerability (CNVD-2021-26049)

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

Aruba Instant Buffer Overflow Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant has a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the underlying operating system by sending specially crafted packets to the PAPI UDP port...

Aruba Instant Arbitrary File Modification Vulnerability (CNVD-2021-26048)

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via the Web UI to overwrite arbitrary files with content under their control...

CVE-2021-25149

The CVE-2021-25149 vulnerability affects Aruba Instant Access Point (IAP) products across Aruba Instant 6.4.x (≤6.4.4.8-4.2.4.17), 6.5.x (≤6.5.4.16), 8.3.x (≤8.3.0.12), 8.5.x (≤8.5.0.6), and 8.6.x (≤8.6.0.2). It is described as a remote buffer overflow in the PAPI UDP handling that could allow co...

CVE-2021-25149

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Insta...

CVE-2021-25148

CVE-2021-25148 affects Aruba Instant IAP devices. A remote arbitrary file modification vulnerability exists in Aruba Instant 6.5.x (≤6.5.4.17), 8.3.x (≤8.3.0.13), 8.5.x (≤8.5.0.10), and 8.6.x (≤8.6.0.4). The underlying issue allows an attacker to overwrite or modify files via remote interfaces (C...

CVE-2021-25145

A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.1...

CVE-2021-25143

A remote denial of service dos vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that addre...

CVE-2021-25144

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Insta...

CVE-2020-24636

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2020-24635

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2020-24636

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2020-24635

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2021-25143

A remote denial of service dos vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that addre...

Design/Logic Flaw

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aru...

CVE-2020-24636

CVE-2020-24636 is a remote command-execution vulnerability affecting Aruba Instant IAPs. The issue exists in Aruba Instant 6.5.x (6.5.4.17 and below), 8.3.x (8.3.0.13 and below), 8.5.x (8.5.0.10 and below), 8.6.x (8.6.0.5 and below), and 8.7.x (8.7.0.0 and below). Siemens/Red Hat and other connec...

CVE-2021-25144

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Insta...

CVE-2020-24635

CVE-2020-24635 is a command-injection vulnerability in Aruba Instant IAPs (Aruba Instant CLI/Web UI) that allows remote execution of arbitrary commands with high privileges. Affected versions include Aruba Instant 6.5.x (≤6.5.4.17), 8.3.x (≤8.3.0.13), 8.5.x (≤8.5.0.10), 8.6.x (≤8.6.0.5), and 8.7....