CVE-2021-37729

CVE-2021-37729 describes a remote path traversal vulnerability affecting Aruba SD-WAN Software and Gateways and ArubaOS. Affected ArubaOS/SD-WAN releases include ArubaOS versions before 8.6.0.0-2.2.0.4 and before 8.7.1.3 (as well as certain earlier 8.6.x, 8.5.x, 8.3.x, 6.5.x, 6.4.x branches). The...

CVE-2021-37728

A remote path traversal vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for ArubaOS that address this security vulnerability...

CVE-2021-37728

Technical details for CVE-2021-37728 are not publicly provided in the supplied documents. Monitor for updated advisories from Aruba; patches exist prior to certain versions, but no specifics are included here.

CVE-2021-37721

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...

CVE-2021-37721

CVE-2021-37721 is a remote arbitrary command execution vulnerability affecting Aruba SD-WAN Software and Gateways and ArubaOS. Affected versions include Aruba SD-WAN Software prior to 8.6.0.4-2.2.0.4 and prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25; Aruba has released patches...

CVE-2021-37724

CVE-2021-37724 affects ArubaOS (Aruba Mobility-Defined Networks). The vulnerability is a remote arbitrary command execution in ArubaOS software prior to versions 8.7.1.2, 8.6.0.8, 8.5.0.12, and 8.3.0.16. Siemens/Red Hat and other linked sources corroborate ArubaOS command-injection family and adv...

CVE-2021-37724

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software versions: Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability...

CVE-2021-37718

CVE-2021-37718 (Aruba SD-WAN / ArubaOS) is a remote arbitrary command execution vulnerability. The vulnerability affects Aruba SD-WAN Software and Gateways and ArubaOS on several old releases, including Aruba Operating System Software versions prior to 8.6.0.4-2.2.0.6 and prior to 8.7.1.4, 8.6.0....

CVE-2021-37718

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS...

CVE-2021-37722

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...

CVE-2021-37722

CVE-2021-37722 is a remote arbitrary command execution vulnerability in Aruba SD-WAN Software and Gateways and ArubaOS. Affected are Aruba SD-WAN Software and Gateways and various ArubaOS versions listed as pre-patch (e.g., prior to several 8.x.x.x and 6.x.x.x releases). Aruba has released patche...

CVE-2021-37720

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...

CVE-2021-37720

CVE-2021-37720 is a remote arbitrary command execution vulnerability in Aruba SD-WAN Software and Gateways and ArubaOS. Affected software includes Aruba SD-WAN Software and Gateways and ArubaOS versions prior to 8.6.0.4-2.2.0.4; prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. A...

CVE-2021-37719

CVE-2021-37719 is a remote arbitrary command execution in Aruba SD-WAN Software and Gateways and ArubaOS. Affected versions include ArubaOS prior to 8.6.0.4-2.2.0.4 and prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba/Siemens advisories note patches are available and recom...

CVE-2021-37719

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...

CVE-2021-37717

CVE-2021-37717 concerns Aruba SD-WAN Software and Gateways (ArubaOS). The vulnerability is a remote arbitrary command execution issue affecting Aruba SD-WAN Software and Gateways and ArubaOS. Affected versions include Aruba OS Software prior to 8.6.0.4-2.2.0.6; prior to 8.7.1.4, 8.6.0.7, 8.5.0.12...

CVE-2021-37717

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS...

CVE-2019-5318

ArubaOS CVE-2019-5318 is a remote CSRF vulnerability affecting Aruba Operating System Software in 6.x.x.x (all versions) and 8.x.x.x (all versions prior to 8.8.0.0). The issue is due to CSRF in ArubaOS that allows an unauthenticated or less-privileged attacker to induce state-changing actions on ...

CVE-2019-5318

A remote cross-site request forgery csrf vulnerability was discovered in Aruba Operating System Software versions: 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability...

CVE-2021-37716

CVE-2021-37716 describes a remote buffer overflow in Aruba OS/SD-WAN components that can be triggered by malformed PAPI packets sent to UDP port 8211, affecting Aruba SD-WAN Software and Gateways and ArubaOS. Affected versions include prior to 8.6.0.4-2.2.0.4 and prior to 8.7.1.2, 8.6.0.8, 8.5.0....