CVE-2021-41005 — MEDIUM (6.5)

Q: What is CVE-2021-41005?

CVE-2021-41005 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

Q: How severe is CVE-2021-41005?

CVE-2021-41005 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-41005?

Check the references section above for vendor advisories and patch information. Affected products include: Hpe Aruba Instant On 1930 8G 2Sfp Firmware, Hpe Aruba Instant On 1930 8G 2Sfp, Hpe Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W Firmware, Hpe Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W, Hpe Aruba Instant On 1930 48G Class4 Poe 4Sfp\/Sfp\+ 370W Firmware.

Vulnerability Description

A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Hpe	Aruba Instant On 1930 8G 2Sfp Firmware	< 1.0.7.0
Hpe	Aruba Instant On 1930 8G 2Sfp	-
Hpe	Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W Firmware	< 1.0.7.0
Hpe	Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W	-
Hpe	Aruba Instant On 1930 48G Class4 Poe 4Sfp\/Sfp\+ 370W Firmware	< 1.0.7.0
Hpe	Aruba Instant On 1930 48G Class4 Poe 4Sfp\/Sfp\+ 370W	-
Hpe	Aruba Instant On 1930 48G 4Sfp\/Sfp\+ Firmware	< 1.0.7.0
Hpe	Aruba Instant On 1930 48G 4Sfp\/Sfp\+	-
Hpe	Aruba Instant On 1930 24G Class4 Poe 4Sfp\/Sfp\+ 370W Firmware	< 1.0.7.0
Hpe	Aruba Instant On 1930 24G Class4 Poe 4Sfp\/Sfp\+ 370W	-
Hpe	Aruba Instant On 1930 24G Class4 Poe 4Sfp\/Sfp\+ 195W Firmware	< 1.0.7.0
Hpe	Aruba Instant On 1930 24G Class4 Poe 4Sfp\/Sfp\+ 195W	-
Hpe	Aruba Instant On 1930 24G 4Sfp\/Sfp\+ Firmware	< 1.0.7.0
Hpe	Aruba Instant On 1930 24G 4Sfp\/Sfp\+	-

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpeMitigationVendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpeMitigationVendor Advisory

FAQ

What is CVE-2021-41005?

CVE-2021-41005 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

How severe is CVE-2021-41005?

CVE-2021-41005 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-41005?

Check the references section above for vendor advisories and patch information. Affected products include: Hpe Aruba Instant On 1930 8G 2Sfp Firmware, Hpe Aruba Instant On 1930 8G 2Sfp, Hpe Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W Firmware, Hpe Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W, Hpe Aruba Instant On 1930 48G Class4 Poe 4Sfp\/Sfp\+ 370W Firmware.