SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or trigger buffer overflows. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (21)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-34618US | medium6.5 | — | ||
A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Arub… | ||||
| CVE-2021-34617US | medium6.1 | — | ||
A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; A… | ||||
| CVE-2021-25162US | high8.1 | Exploit | ||
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and bel… | ||||
| CVE-2021-25161US | medium6.1 | Exploit | ||
A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; A… | ||||
| CVE-2021-25160US | medium4.9 | Exploit | ||
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… | ||||
| CVE-2021-25159US | medium6.5 | Exploit | ||
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… | ||||
| CVE-2021-25158US | medium5.9 | Exploit | ||
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.… | ||||
| CVE-2021-25157US | medium4.9 | Exploit | ||
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba In… | ||||
| CVE-2021-25156US | medium4.9 | Exploit | ||
A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; A… | ||||
| CVE-2019-5319US | critical9.8 | — | ||
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instan… | ||||
| CVE-2021-25155US | medium6.5 | Exploit | ||
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… | ||||
| CVE-2021-25150US | high8.8 | — | ||
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Arub… | ||||
| CVE-2021-25146US | high7.2 | — | ||
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Arub… | ||||
| CVE-2021-25149US | critical9.8 | — | ||
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instan… | ||||
| CVE-2021-25148US | high8.1 | — | ||
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba In… | ||||
| CVE-2021-25145US | medium6.5 | — | ||
A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18… | ||||
| CVE-2021-25144US | high8.8 | — | ||
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instan… | ||||
| CVE-2021-25143US | high7.5 | — | ||
A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instan… | ||||
| CVE-2020-24636US | critical9.8 | — | ||
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Arub… | ||||
| CVE-2020-24635US | high7.2 | — | ||
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Arub… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (42)
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- MitigationSCALANCE W1750D
Block access to the Aruba Instant Command Line Interface from all untrusted users
- BehobenSCALANCE W1750D
Update to V8.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782770 - BehobenSCALANCE W1750D
Update to V8.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782770 - BehobenSCALANCE W1750D
Update to V8.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782770 - BehobenSCALANCE W1750D
Update to V8.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782770 - BehobenSCALANCE W1750D
Update to V8.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782770 - BehobenSCALANCE W1750D
Update to V8.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782770 - BehobenSCALANCE W1750D
Update to V8.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782770 - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan