PT-2021-21834

CVE-2021-37719

·

Published

2021-09-07

·

Updated

2021-09-09

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Aruba SD-WAN Software and Gateways versions prior to 8.6.0.4-2.2.0.4 Aruba Operating System Software versions prior to 8.7.1.4 Aruba Operating System Software version 8.6.0.9 Aruba Operating System Software version 8.5.0.13 Aruba Operating System Software version 8.3.0.16 Aruba Operating System Software version 6.5.4.20 Aruba Operating System Software version 6.4.4.25
Description: A remote arbitrary command execution issue was discovered. Aruba has released patches that address this security issue.
Recommendations: For Aruba SD-WAN Software and Gateways versions prior to 8.6.0.4-2.2.0.4, apply the released patch. For Aruba Operating System Software versions prior to 8.7.1.4, apply the released patch. For Aruba Operating System Software version 8.6.0.9, apply the released patch. For Aruba Operating System Software version 8.5.0.13, apply the released patch. For Aruba Operating System Software version 8.3.0.16, apply the released patch. For Aruba Operating System Software version 6.5.4.20, apply the released patch. For Aruba Operating System Software version 6.4.4.25, apply the released patch.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')
Related identifiers
CVE-2021-37719
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com