Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-29143

A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.

Published

2021-07-22T14:15:07.947

Last Modified

2024-11-21T06:00:46.450

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_6200f - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_6300 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_6400 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8320 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8325 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8360 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8400 - No
References