CVE-2021-29149: Medium severity aruba networks aos-cx vulnerability
A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29149?
CVE-2021-29149 has a medium severity rating due to potential local bypass of security restrictions.
How do I fix CVE-2021-29149?
To fix CVE-2021-29149, update the affected Aruba AOS-CX firmware to a version prior to 10.04.3070, or after 10.07.0001.
Which Aruba AOS-CX firmware versions are vulnerable to CVE-2021-29149?
Firmware versions from 10.04.000 up to 10.04.3070, 10.05.000 up to 10.05.0070, 10.06.000 up to 10.06.0110, and 10.07.0000 up to 10.07.0001 are vulnerable.
Is the Aruba CX 6200F affected by CVE-2021-29149?
No, the Aruba CX 6200F is not affected by CVE-2021-29149.
What types of devices are impacted by CVE-2021-29149?
The devices impacted by CVE-2021-29149 include various models in the Aruba CX 6200F, 6300, 6400, 8320, 8325, 8400, and 8360 Switch Series running the specified firmware versions.