Siemens SCALANCE
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has released updates for the SCALANCE W1750D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37733US | medium4.9 | — | ||
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1,… | ||||
| CVE-2021-37731US | medium6.2OT elevated | — | ||
A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8… | ||||
| CVE-2021-37729US | medium6.5 | — | ||
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3,… | ||||
| CVE-2021-37728US | medium6.5 | — | ||
A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for Ar… | ||||
| CVE-2021-37725US | high8.1 | — | ||
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… | ||||
| CVE-2021-37724US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released p… | ||||
| CVE-2021-37723US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released p… | ||||
| CVE-2021-37722US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37721US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37720US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37719US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37718US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior… | ||||
| CVE-2021-37717US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior… | ||||
| CVE-2021-37716US | critical9.8 | — | ||
A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2,… | ||||
| CVE-2019-5318US | medium6.5 | — | ||
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0… | ||||
references
External citations — patches, advisories, analysis.
- SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D - CSAF Versionself
- SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D - PDF Versionself
- SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D - TXT Versionself
- ICS Advisory ICSA-21-287-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-287-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (31)
- No fix plannedSCALANCE W1750D
Currently no fix is planned
- FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - FixedSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan