SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has released updates for the SCALANCE W1750D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (15)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37733US | medium4.9 | — | ||
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1,… | ||||
| CVE-2021-37731US | medium6.2OT erhöht | — | ||
A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8… | ||||
| CVE-2021-37729US | medium6.5 | — | ||
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3,… | ||||
| CVE-2021-37728US | medium6.5 | — | ||
A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for Ar… | ||||
| CVE-2021-37725US | high8.1 | — | ||
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… | ||||
| CVE-2021-37724US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released p… | ||||
| CVE-2021-37723US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released p… | ||||
| CVE-2021-37722US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37721US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37720US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37719US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior… | ||||
| CVE-2021-37718US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior… | ||||
| CVE-2021-37717US | high7.2 | — | ||
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior… | ||||
| CVE-2021-37716US | critical9.8 | — | ||
A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2,… | ||||
| CVE-2019-5318US | medium6.5 | — | ||
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (31)
- Kein Fix geplantSCALANCE W1750D
Currently no fix is planned
- BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750D
Block access to the ArubaOS Command Line Interface from all untrusted users
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan