First published: Wed Aug 26 2020(Updated: )
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.
Credit: security-alert@hpe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Arubanetworks 5400r Firmware | >=16.08.0<16.08.0009 | |
Arubanetworks 5400r Firmware | >=16.09.0<16.09.0007 | |
Arubanetworks 5400r Firmware | >=16.10.0<16.10.0003 | |
Arubanetworks 5400r | ||
Arubanetworks 3810 Firmware | >=16.08.0<16.08.0009 | |
Arubanetworks 3810 Firmware | >=16.09.0<16.09.0007 | |
Arubanetworks 3810 Firmware | >=16.10.0<16.10.0003 | |
Arubanetworks 3810 | ||
Arubanetworks 2920 Firmware | >=16.08.0<16.08.0009 | |
Arubanetworks 2920 Firmware | >=16.09.0<16.09.0007 | |
Arubanetworks 2920 Firmware | >=16.10.0<16.10.0003 | |
Arubanetworks 2920 | ||
Arubanetworks 2930 Firmware | >=16.08.0<16.08.0009 | |
Arubanetworks 2930 Firmware | >=16.09.0<16.09.0007 | |
Arubanetworks 2930 Firmware | >=16.10.0<16.10.0003 | |
Arubanetworks 2930 | ||
Arubanetworks 2530 Firmware | >=16.08.0<16.08.0009 | |
Arubanetworks 2530 Firmware | >=16.09.0<16.09.0007 | |
Arubanetworks 2530 Firmware | >=16.10.0<16.10.0003 | |
Arubanetworks 2530 | ||
Arubanetworks 2540 Firmware | >=16.08.0<16.08.0009 | |
Arubanetworks 2540 Firmware | >=16.09.0<16.09.0007 | |
Arubanetworks 2540 Firmware | >=16.10.0<16.10.0003 | |
Arubanetworks 2540 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-5321 is a vulnerability found in Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware versions before 16.08.0009, 16.09.0007, 16.10.0003 that allows remote unauthorized access in the WebUI.
CVE-2019-5321 has a severity rating of 8.8 (critical).
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware versions before 16.08.0009, 16.09.0007, 16.10.0003 are affected by CVE-2019-5321.
To fix CVE-2019-5321, update your Aruba Intelligent Edge Switch firmware to version 16.08.0009, 16.09.0007, or 16.10.0003.
You can find more information about CVE-2019-5321 on the Aruba Networks website at https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-007.txt.