PT-2021-16425

CVE-2021-25152

·

Published

2021-04-28

·

Updated

2021-05-12

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.1
Description: A remote insecure deserialization vulnerability was discovered. Aruba has released patches that address this security issue.
Recommendations: For versions prior to 8.2.12.1, apply the released patches to resolve the issue. As a temporary workaround, consider restricting access to the management platform until the patch is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2021-25152
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com