Lucene search

[email protected]CVE-2021-41005

HistoryApr 12, 2022 - 5:15 p.m.

CVE-2021-41005

2022-04-1217:15:08

[email protected]

web.nvd.nist.gov

cve-2021-41005

aruba instant on

1930 switch series

remote vulnerability

firmware vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

Affected configurations

NVD

Node

hpearuba_instant_on_1930_8g_2sfp_firmwareRange<1.0.7.0

AND

hpearuba_instant_on_1930_8g_2sfpMatch-

Node

hpearuba_instant_on_1930_8g_class4_poe_2sfp_124w_firmwareRange<1.0.7.0

AND

hpearuba_instant_on_1930_8g_class4_poe_2sfp_124wMatch-

Node

hpearuba_instant_on_1930_48g_class4_poe_4sfp\/sfp\+_370w_firmwareRange<1.0.7.0

AND

hpearuba_instant_on_1930_48g_class4_poe_4sfp\/sfp\+_370wMatch-

Node

hpearuba_instant_on_1930_48g_4sfp\/sfp\+_firmwareRange<1.0.7.0

AND

hpearuba_instant_on_1930_48g_4sfp\/sfp\+Match-

Node

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_370w_firmwareRange<1.0.7.0

AND

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_370wMatch-

Node

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_195w_firmwareRange<1.0.7.0

AND

hpearuba_instant_on_1930_24g_class4_poe_4sfp\/sfp\+_195wMatch-

Node

hpearuba_instant_on_1930_24g_4sfp\/sfp\+Match-

AND

hpearuba_instant_on_1930_24g_4sfp\/sfp\+_firmwareRange<1.0.7.0

CPENameOperatorVersion
hpe:aruba_instant_on_1930_8g_2sfp_firmwarehpe aruba instant on 1930 8g 2sfp firmwarelt1.0.7.0

CPE	Name	Operator	Version
hpe:aruba_instant_on_1930_8g_2sfp_firmware	hpe aruba instant on 1930 8g 2sfp firmware	lt	1.0.7.0

CNA Affected

[
  {
    "product": "Aruba Instant On 1930 Switch Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware below v1.0.7.0"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

Related for CVE-2021-41005

nvd1 cvelist1 prion1