CVE-2021-37724

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
hpeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
arubanetworksarubaos
8.3.0.0 ≤
𝑥
< 8.3.0.16
arubanetworksarubaos
8.5.0.0 ≤
𝑥
< 8.5.0.12
arubanetworksarubaos
8.6.0.0 ≤
𝑥
< 8.6.0.8
arubanetworksarubaos
8.7.0.0 ≤
𝑥
< 8.7.1.2
siemensscalance_w1750d_firmware
𝑥
< 8.7.1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt
https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt