CVE-2019-5321

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
hpeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
arubanetworks5400r_firmware
16.08.0 ≤
𝑥
< 16.08.0009
arubanetworks5400r_firmware
16.09.0 ≤
𝑥
< 16.09.0007
arubanetworks5400r_firmware
16.10.0 ≤
𝑥
< 16.10.0003
arubanetworks3810_firmware
16.08.0 ≤
𝑥
< 16.08.0009
arubanetworks3810_firmware
16.09.0 ≤
𝑥
< 16.09.0007
arubanetworks3810_firmware
16.10.0 ≤
𝑥
< 16.10.0003
arubanetworks2920_firmware
16.08.0 ≤
𝑥
< 16.08.0009
arubanetworks2920_firmware
16.09.0 ≤
𝑥
< 16.09.0007
arubanetworks2920_firmware
16.10.0 ≤
𝑥
< 16.10.0003
arubanetworks2930_firmware
16.08.0 ≤
𝑥
< 16.08.0009
arubanetworks2930_firmware
16.09.0 ≤
𝑥
< 16.09.0007
arubanetworks2930_firmware
16.10.0 ≤
𝑥
< 16.10.0003
arubanetworks2530_firmware
16.08.0 ≤
𝑥
< 16.08.0009
arubanetworks2530_firmware
16.09.0 ≤
𝑥
< 16.09.0007
arubanetworks2530_firmware
16.10.0 ≤
𝑥
< 16.10.0003
arubanetworks2530_firmware
16.08.0 ≤
𝑥
< 16.08.0009
arubanetworks2530_firmware
16.09.0 ≤
𝑥
< 16.09.0007
arubanetworks2530_firmware
16.10.0 ≤
𝑥
< 16.10.0003
arubanetworks2540_firmware
16.08.0 ≤
𝑥
< 16.08.0009
arubanetworks2540_firmware
16.09.0 ≤
𝑥
< 16.09.0007
arubanetworks2540_firmware
16.10.0 ≤
𝑥
< 16.10.0003
𝑥
= Vulnerable software versions
References
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-007.txt
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-007.txt