Siemens SCALANCE W1750D (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE W1750D Vulnerabilities: Improper Authentication, Classic Buffer Overflow, Command Injection, Improper Input Validation, Race Condition, Cross-site Scripting, Basic XSS,...

CVE-2019-5317

CVE-2019-5317 describes a local authentication bypass in Aruba Instant Access Point (IAP) devices. Affected families include Aruba Instant 6.4.x (up to 6.4.4.8-4.2.4.18), 6.5.x (up to 6.5.4.15), 8.3.x (up to 8.3.0.11), 8.4.x (up to 8.4.0.5), 8.5.x (up to 8.5.0.6), and 8.6.x (up to 8.6.0.2). The v...