« Volver al listado

CVE-2021-34617

Estado: ModificadaMedia (6.1)—

A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below; Aruba Instant 8.3.x: 8.3.0.7 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Aruba — Aruba Instant

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-34617",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Aruba Instant Access Points",
          "versions": [
            {
              "status": "affected",
              "version": "Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below"
            },
            {
              "status": "affected",
              "version": "Aruba Instant 6.5.x: 6.5.4.13 and below"
            },
            {
              "status": "affected",
              "version": "Aruba Instant 8.3.x: 8.3.0.7 and below"
            },
            {
              "status": "affected",
              "version": "Aruba Instant 8.4.x: 8.4.0.5 and below"
            },
            {
              "status": "affected",
              "version": "Aruba Instant 8.5.x: 8.5.0.0 and below"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-07-19T20:15:08.697",
  "references": [
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below; Aruba Instant 8.3.x: 8.3.0.7 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
    },
    {
      "lang": "es",
      "value": "Se ha detectado una vulnerabilidad de tipo cross-site scripting (XSS) remotos en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 y posteriores; Aruba Instant 6.5.x: 6.5.4.13 y posteriores; Aruba Instant 8.3.x: 8.3.0.7 y posteriores; Aruba Instant 8.4.x: 8.4.0.5 y posteriores; Aruba Instant 8.5.x: 8.5.0.0 y posteriores. Aruba ha publicado parches para Aruba Instant que solucionan esta vulnerabilidad de seguridad"
    }
  ],
  "lastModified": "2026-06-17T03:56:14.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:aruba:aruba_instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCE522AB-C07C-4BC9-90C4-F89CF4DD4E09",
              "versionEndIncluding": "6.4.4.8-4.2.4.13",
              "versionStartIncluding": "6.4.0"
            },
            {
              "criteria": "cpe:2.3:h:aruba:aruba_instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F68F339D-FBBA-46DF-A50B-6FEEA43E55C2",
              "versionEndIncluding": "6.5.4.13",
              "versionStartIncluding": "6.5.0"
            },
            {
              "criteria": "cpe:2.3:h:aruba:aruba_instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37D8D1FF-167A-4369-9905-0E7D2742A180",
              "versionEndIncluding": "8.3.0.7",
              "versionStartIncluding": "8.3.0"
            },
            {
              "criteria": "cpe:2.3:h:aruba:aruba_instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "758AF363-10A2-44C3-B730-7D847016D614",
              "versionEndIncluding": "8.4.0.5",
              "versionStartIncluding": "8.4.0"
            },
            {
              "criteria": "cpe:2.3:h:aruba:aruba_instant:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C734716-F0C1-4BE2-97B0-FF2CD72D9E95",
              "versionEndIncluding": "8.5.0.0",
              "versionStartIncluding": "8.5.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}