PT-2020-11112 · Aruba · Aruba Intelligent Edge Switch Series 2920+5

Published 2020-08-26 · Updated 2020-09-02 · CVE-2019-5320

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Aruba Intelligent Edge Switch Series 2540 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2540 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2540 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2530 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2530 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2530 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2930F versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2930F versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2930F versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2930M versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2930M versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2930M versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2920 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2920 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2920 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 5400R versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 5400R versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 5400R versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 3810M versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 3810M versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 3810M versions 16.10.* through 16.10.0002

Description The issue is related to Cross Site Scripting in the web UI, which can lead to the injection of code.

Recommendations For Aruba Intelligent Edge Switch Series 2540 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2540 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2540 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.10.*, update to version 16.10.0003 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-5320

Affected Products

Aruba Intelligent Edge Switch Series 2530

Aruba Intelligent Edge Switch Series 2540

Aruba Intelligent Edge Switch Series 2920

Aruba Intelligent Edge Switch Series 2930F

Aruba Intelligent Edge Switch Series 3810M

Aruba Intelligent Edge Switch Series 5400R

References · 3

• https://arubanetworks.com/assets/alert/ARUBA-PSA-2020-007.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5320 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5320 · Vendor Advisory