PT-2020-8028 · Aruba · Aruba Instant

·

CVE-2016-2031

·

Published

2020-01-31

·

Updated

2022-11-10

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Aruba Instate versions prior to 4.1.3.0 Aruba Instate versions prior to 4.2.3.1
Description: The issue is caused by insufficient validation of user-supplied input and insufficient checking of parameters. This could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions, and execute arbitrary code.
Recommendations: For versions prior to 4.1.3.0, update to version 4.1.3.0 or later. For versions prior to 4.2.3.1, update to version 4.2.3.1 or later.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2016-2031

Affected Products

Aruba Instant