A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.10 and below; Aruba Instant 8.6.x.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf | Patch Third Party Advisory |
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
History
24 Nov 2021, 21:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf - Patch, Third Party Advisory |
17 Nov 2021, 22:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Nov 2021, 21:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:* |
10 Nov 2021, 01:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Nov 2021, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
18 Oct 2021, 17:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:arubanetworks:aruba_instant:*:*:*:*:*:*:*:* | |
| References | (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
| CWE | CWE-134 |
12 Oct 2021, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-12 16:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-37735
Mitre link : CVE-2021-37735
CVE.ORG link : CVE-2021-37735
JSON object : View
Products Affected
siemens
- scalance_w1750d_firmware
- scalance_w1750d
arubanetworks
- aruba_instant
CWE
CWE-134
Use of Externally-Controlled Format String