scalance_w1750d_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/scalance_w1750d_firmware/ Sun, 26 Feb 2023 06:50:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png scalance_w1750d_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/scalance_w1750d_firmware/ 32 32 CVE-2018-7084 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7084/ Sun, 26 Feb 2023 06:50:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7084/ A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. Workaround: Block access to the Aruba Instant […]

The post CVE-2018-7084 appeared first on CVE Vulnerability.

]]> A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.1

The post CVE-2018-7084 appeared first on CVE Vulnerability.

]]> CVE-2018-7082 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7082/ Sun, 26 Feb 2023 06:50:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7082/ A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. Workaround: None. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, […]

The post CVE-2018-7082 appeared first on CVE Vulnerability.

]]> A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. Workaround: None. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0

The post CVE-2018-7082 appeared first on CVE Vulnerability.

]]> CVE-2019-5319 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5319/ Sun, 26 Feb 2023 06:33:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5319/ A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that […]

The post CVE-2019-5319 appeared first on CVE Vulnerability.

]]> A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

The post CVE-2019-5319 appeared first on CVE Vulnerability.

]]> CVE-2019-5318 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5318/ Sun, 26 Feb 2023 06:33:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5318/ A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability.

The post CVE-2019-5318 appeared first on CVE Vulnerability.

]]> A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability.

The post CVE-2019-5318 appeared first on CVE Vulnerability.

]]> CVE-2019-5317 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5317/ Sun, 26 Feb 2023 06:33:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5317/ A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.15 and below; Aruba Instant 8.3.x: 8.3.0.11 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has […]

The post CVE-2019-5317 appeared first on CVE Vulnerability.

]]> A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.15 and below; Aruba Instant 8.3.x: 8.3.0.11 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

The post CVE-2019-5317 appeared first on CVE Vulnerability.

]]> CVE-2021-37734 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-37734/ Thu, 23 Feb 2023 14:11:01 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-37734/ A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.19 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below; Aruba Instant 8.8.x.x: 8.8.0.0 and below. Aruba has released patches for Aruba Instant […]

The post CVE-2021-37734 appeared first on CVE Vulnerability.

]]> A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.19 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below; Aruba Instant 8.8.x.x: 8.8.0.0 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

The post CVE-2021-37734 appeared first on CVE Vulnerability.

]]> CVE-2021-25150 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-25150/ Thu, 23 Feb 2023 14:08:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-25150/ A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

The post CVE-2021-25150 appeared first on CVE Vulnerability.

]]> A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

The post CVE-2021-25150 appeared first on CVE Vulnerability.

]]> CVE-2022-37894 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-37894/ Thu, 23 Feb 2023 05:20:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-37894/ An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: […]

The post CVE-2022-37894 appeared first on CVE Vulnerability.

]]> An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InstantOS that address this security vulnerability.

The post CVE-2022-37894 appeared first on CVE Vulnerability.

]]> CVE-2022-37896 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-37896/ Thu, 23 Feb 2023 05:20:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-37896/ A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface of […]

The post CVE-2022-37896 appeared first on CVE Vulnerability.

]]> A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InstantOS that address this security vulnerability.

The post CVE-2022-37896 appeared first on CVE Vulnerability.

]]> CVE-2022-37895 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-37895/ Thu, 23 Feb 2023 05:20:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-37895/ An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: […]

The post CVE-2022-37895 appeared first on CVE Vulnerability.

]]> An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InstantOS that address this security vulnerability.

The post CVE-2022-37895 appeared first on CVE Vulnerability.

]]>