PT-2021-7840 · Aruba · Aruba Instant

Published

2021-03-09

·

Updated

2022-04-22

·

CVE-2021-25162

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Aruba Instant versions 6.4.4.8 through 6.4.4.17 and below Aruba Instant versions 6.5.4.18 and below Aruba Instant versions 8.3.0.14 and below Aruba Instant versions 8.5.0.11 and below Aruba Instant versions 8.6.0.7 and below Aruba Instant versions 8.7.1.1 and below
Description A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products. This issue allows a remote attacker to execute arbitrary commands in the base operating system.
Recommendations For Aruba Instant versions 6.4.x: apply the released patch to address the security vulnerability. For Aruba Instant versions 6.5.x: apply the released patch to address the security vulnerability. For Aruba Instant versions 8.3.x: apply the released patch to address the security vulnerability. For Aruba Instant versions 8.5.x: apply the released patch to address the security vulnerability. For Aruba Instant versions 8.6.x: apply the released patch to address the security vulnerability. For Aruba Instant versions 8.7.x: apply the released patch to address the security vulnerability.

Exploit

Fix

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-03546
CVE-2021-25162

Affected Products

Aruba Instant