CVE-2019-5322
High
Description
A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.
SeverityHigh
CVSS7.5
Exploit probability—
ProductArubanetworks 3810 Firmware
PublishedFeb 13, 2020
First seenFeb 13, 2020
How to fix
Update
- arubanetworks 3810_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 5400r_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2920_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2930_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2530_with_gigt_port_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2530_10\/100_port_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
- arubanetworks 2540_firmware16.08.0009, 16.09.0007, 16.10.0003 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks 3810_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 5400r_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2920_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2930_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2530_with_gigt_port_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2530_10\/100_port_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
| arubanetworks 2540_firmware | 16.08.0 ≤ v < 16.08.0009, 16.09.0 ≤ v < 16.09.0007, 16.10.0 ≤ v < 16.10.0003 | 16.08.0009, 16.09.0007, 16.10.0003 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.