PT-2021-4682 · Hewlett Packard · Hpe Aruba Instant

Published 2021-10-05 · Updated 2021-11-25 · CVE-2021-37726

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Aruba Instant (IAP) versions 8.7.0.0 through 8.7.1.2

Description A remote buffer overflow vulnerability was discovered, allowing a remote attacker to execute arbitrary code by sending specially crafted packets to port 8211 using the PAPI (Protocol Application Programming Interface) network protocol.

Recommendations For versions 8.7.0.0 through 8.7.1.2, apply the patches released by Aruba to address this security issue. As a temporary workaround, consider restricting access to port 8211 to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

BDU:2021-05375

CVE-2021-37726

Affected Products

Hpe Aruba Instant

References · 9

• https://osv.dev/vulnerability/CVE-2021-37726 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37726 · Security Note
• https://bdu.fstec.ru/vul/2021-05375 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt · Vendor Advisory
• https://t.me/cibsecurity/30414 · Telegram Post
• https://securitylab.ru/vulnerability/525375.php · Note
• https://cybersecurity-help.cz/vulnerabilities/57099 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf · Note
• https://t.me/cvenotify/23756 · Telegram Post