Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-29149

A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.

Published

2021-07-22T14:15:08.017

Last Modified

2024-11-21T06:00:47.203

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.2 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_6200f - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_6300 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_6400 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8320 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8325 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8360 - No
Operating System arubanetworks aos-cx_firmware < 10.04.3070 Yes
Operating System arubanetworks aos-cx_firmware < 10.05.0070 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.06.0110 Yes
Operating System arubanetworks aos-cx_firmware ≤ 10.07.0001 Yes
Hardware arubanetworks cx_8400 - No
References