CVE-2019-5321
High
Description
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.
SeverityHigh
CVSS8.8
Exploit probability—
ProductArubanetworks 5400r Firmware
PublishedAug 26, 2020
First seenAug 26, 2020
How to fix
Update
- arubanetworks 5400r_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 3810_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2920_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2930_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2530_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2540_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks 5400r_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 3810_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2920_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2930_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2530_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2540_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.