« Volver al listado

CVE-2021-25143

Estado: ModificadaAlta (7.5)—

A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Arubanetworks — InstantSiemens — Scalance W1750d Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-25143",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Aruba Instant Access Points",
          "versions": [
            {
              "status": "affected",
              "version": "Aruba Instant 8.3.x: 8.3.0.12 and below"
            },
            {
              "status": "affected",
              "version": "Aruba Instant 8.5.x: 8.5.0.9 and below"
            },
            {
              "status": "affected",
              "version": "Aruba Instant 8.6.x: 8.6.0.4 and below"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-03-29T20:15:13.157",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
    },
    {
      "lang": "es",
      "value": "Se detectó una vulnerabilidad de denegación de servicio (DOS) remota en algunos productos Aruba Instant Access Point (IAP) en las versiones: Aruba Instant versiones 8.3.x: 8.3.0.12 y anteriores; Aruba Instant versiones 8.5.x: 8.5.0.9 y anteriores; Aruba Instant versiones 8.6.x: 8.6.0.4 y anteriores. Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad"
    }
  ],
  "lastModified": "2026-06-17T03:41:32.367",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53DD06C6-1746-4961-AABE-D92147A10859",
              "versionEndExcluding": "8.3.0.13",
              "versionStartIncluding": "8.3.0.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5C7DF37-240A-4A9F-B21D-E60C51DC5765",
              "versionEndExcluding": "8.5.0.10",
              "versionStartIncluding": "8.5.0.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CE69D1D-F180-4E4D-A76B-7459684D410B",
              "versionEndExcluding": "8.6.0.5",
              "versionStartIncluding": "8.6.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D7126AE-7675-4607-A81C-F5D0DA2CF3F8",
              "versionEndExcluding": "8.7.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}