Siemens SCALANCE W1750D Exposure of Sensitive Information to an Unauthorized Actor (CVE-2018-7083)

If a process running within Aruba Instant crashes, it may leave behind a core dump, which contains the memory contents of the process at the time it crashed. It was discovered that core dumps are stored in a way that unauthenticated users can access them through the Aruba Instant web interface...

CVE-2018-7083

The CVE-2018-7083 issue affects Aruba Instant where a crashed process may leave a core dump, which is stored such that unauthenticated users can access it via the Aruba Instant web interface. Core dumps may contain sensitive information (keys, passwords). The connected Nessus/Security advisories ...