PT-2021-16417

CVE-2021-25141

·

Published

2021-02-09

·

Updated

2021-02-16

Description by

CVSS 2.0
4.9
Medium
MetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: HPE and Aruba L2/L3 switch firmware (affected versions not specified)
Description: A data processing error due to improper handling of an unexpected data type in user-supplied information to the switch's management interface has been identified. This error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself, leading to local denial of service (DoS). The user must have administrator privileges to exploit this issue.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾