PT-2020-11114
CVE-2019-5322
·
Published
2020-02-12
·
Updated
2020-08-24
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540 versions 16.08.* through 16.08.0008
Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540 versions 16.09.* through 16.09.0006
Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540 versions 16.10.* through 16.10.0002
Description
A remotely exploitable information disclosure issue is present, allowing an attacker to retrieve sensitive system information without user authentication under very specific conditions.
Recommendations
For versions 16.08.* through 16.08.0008, update to version 16.08.0009 or later.
For versions 16.09.* through 16.09.0006, update to version 16.09.0007 or later.
For versions 16.10.* through 16.10.0002, update to version 16.10.0003 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾