« Volver al listado

CVE-2019-5322

Estado: ModificadaAlta (7.5)—

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-5322",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Aruba Intelligent Edge Switch 5400 3810 2920 2930 2530 with GigT port 2530 10/100 port or 2540",
          "versions": [
            {
              "status": "affected",
              "version": "16.08.* before 16.08.0009 16.09.* before 16.09.0007 16.10.* before 16.10.0003"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-02-13T00:15:11.150",
  "references": [
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de divulgación de información remotamente explotable está presente en Aruba Intelligent Edge Switch modelos 5400, 3810, 2920, 2930, 2530 con puerto GigT, puerto 2530 10/100 o 2540. La vulnerabilidad afecta a versiones de firmware 16.08.* anteriores a 16.08.0009, 16.09.* anteriores a 16.09.0007 y 16.10.* anteriores a 16.10.0003. La vulnerabilidad permite a un atacante recuperar información confidencial del sistema. Este ataque puede llevarse a cabo sin autenticación del usuario bajo condiciones muy específicas."
    }
  ],
  "lastModified": "2026-06-17T02:37:30.840",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2341B367-40AF-4C35-9F42-A70DC7EF7327",
              "versionEndExcluding": "16.08.0009",
              "versionStartIncluding": "16.08.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "366D01BF-B225-46CE-8D65-CD5D465927D7",
              "versionEndExcluding": "16.09.0007",
              "versionStartIncluding": "16.09.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCEEF1C4-2DB6-442E-A0FB-142164AA468B",
              "versionEndExcluding": "16.10.0003",
              "versionStartIncluding": "16.10.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:5400r:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0A4D2FBD-6C59-4335-91A4-E207A79437EE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F665194-5588-4C44-872A-7F8FBFC4CC13",
              "versionEndExcluding": "16.08.0009",
              "versionStartIncluding": "16.08.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1AA1B366-6CBF-4E15-80F1-49C5FEB57AA9",
              "versionEndExcluding": "16.09.0007",
              "versionStartIncluding": "16.09.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59F72D27-CA2E-4552-B98D-3C38A80FCECB",
              "versionEndExcluding": "16.10.0003",
              "versionStartIncluding": "16.10.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:3810:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "05464EC4-B17E-4978-A3A2-D15E6AEFEE8D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FE44B66-0B01-469E-B1CF-9B404EE94BFE",
              "versionEndExcluding": "16.08.0009",
              "versionStartIncluding": "16.08.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12A7AD83-407F-4C6B-82C6-F3EEEB3F6C5D",
              "versionEndExcluding": "16.09.0007",
              "versionStartIncluding": "16.09.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12C3064B-E09E-402C-81D9-B0DE4A0DBCAC",
              "versionEndExcluding": "16.10.0003",
              "versionStartIncluding": "16.10.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:2920:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "49A558E1-58CF-44DE-91D6-CCD2ABE05542"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C9C1C8A-31D3-40D9-BB14-923F7EC97C10",
              "versionEndExcluding": "16.08.0009",
              "versionStartIncluding": "16.08.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0F7BA54-B828-40D5-9A4D-A01554AC7422",
              "versionEndExcluding": "16.09.0007",
              "versionStartIncluding": "16.09.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C38896E-3369-48FF-8412-C0DED8149D54",
              "versionEndExcluding": "16.10.0003",
              "versionStartIncluding": "16.10.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:2930:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "82CDF5BF-DE3C-4F5A-9766-BFFE20D4B5AF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "008556C5-C893-4425-B8AC-F9B2F6B590F0",
              "versionEndExcluding": "16.08.0009",
              "versionStartIncluding": "16.08.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEFCCBCA-332D-4276-9FE8-39B7A43FDBC4",
              "versionEndExcluding": "16.09.0007",
              "versionStartIncluding": "16.09.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44823B98-B516-4DD1-9756-75492D13DB41",
              "versionEndExcluding": "16.10.0003",
              "versionStartIncluding": "16.10.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:2530_with_gigt_port:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FAF00DD-9FBE-42AB-8DCA-AE6788A6D107"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:2530_10\\/100_port_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7A73043-AC6B-4B49-A146-A018F8B473E6",
              "versionEndExcluding": "16.08.0009",
              "versionStartIncluding": "16.08.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2530_10\\/100_port_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C175A0DD-270B-4BE0-A0DF-F96678734E62",
              "versionEndExcluding": "16.09.0007",
              "versionStartIncluding": "16.09.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2530_10\\/100_port_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D45E7E69-6876-495C-8D25-86EBD02C2226",
              "versionEndExcluding": "16.10.0003",
              "versionStartIncluding": "16.10.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:2530_10\\/100_port:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AE50F97D-4D29-41DE-8044-7EA0C40A8AD7"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0898F407-54CF-46F8-B7B0-F2457361C5CA",
              "versionEndExcluding": "16.08.0009",
              "versionStartIncluding": "16.08.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AAC32CC-E459-43E7-8932-113730FCBB70",
              "versionEndExcluding": "16.09.0007",
              "versionStartIncluding": "16.09.0"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FBB7E2A8-86F3-4AF2-913A-42958C942BFF",
              "versionEndExcluding": "16.10.0003",
              "versionStartIncluding": "16.10.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:2540:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9DFFC632-14E9-49DC-AC70-915549150CAF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}