PT-2020-11113 · Aruba · Aruba Intelligent Edge Switch Series 2920+5

Published 2020-08-26 · Updated 2021-07-21 · CVE-2019-5321

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Aruba Intelligent Edge Switch Series 2540 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2540 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2540 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2530 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2530 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2530 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2930F versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2930F versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2930F versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2930M versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2930M versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2930M versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2920 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2920 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2920 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 5400R versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 5400R versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 5400R versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 3810M versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 3810M versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 3810M versions 16.10.* through 16.10.0002

Description The issue allows for Remote Unauthorized Access in the WebUI.

Recommendations For Aruba Intelligent Edge Switch Series 2540 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2540 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2540 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.10.*, update to version 16.10.0003 or later.

Fix

Related Identifiers

CVE-2019-5321

Affected Products

Aruba Intelligent Edge Switch Series 2530

Aruba Intelligent Edge Switch Series 2540

Aruba Intelligent Edge Switch Series 2920

Aruba Intelligent Edge Switch Series 2930F

Aruba Intelligent Edge Switch Series 3810M

Aruba Intelligent Edge Switch Series 5400R

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5321 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2020-007.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5321 · Vendor Advisory