CVE-2021-37717
highPriorität · verfolgen · 30EPSS 0.031 · 87. PerzentilDEEUUSEPSS · bewertet 2026-10-26
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSCALANCE W1750Dsiemens_psirt
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - BehobenSCALANCE W1750Dcisa_csaf_ot
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802805/ - WorkaroundSCALANCE W1750Dsiemens_psirt
Block access to the ArubaOS Command Line Interface from all untrusted users
- WorkaroundSCALANCE W1750Dcisa_csaf_ot
Block access to the ArubaOS Command Line Interface from all untrusted users
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–9
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (13)
Betroffene Produkte und Versionsbereiche.
- n/a Aruba SD-WAN Software and Gateways; Aruba Operating System Software≤ Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16enisa_euvdEU
- n/a Aruba SD-WAN Software and Gateways; Aruba Operating System Software≤ Prior to 8.6.0.4-2.2.0.6enisa_euvdEU
- siemens scalance w1750d firmwarealle VersionennvdUScpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-280624SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D2021-10-12csaf · siemens_psirtDE
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has released updates for the SCALANCE W1750D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
- ICSA-21-287-07Siemens SCALANCE2021-10-12icsa · cisa_csaf_otUS
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has released updates for the SCALANCE W1750D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdfcnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-287-07cnnvd
- https://vigilance.fr/vulnerability/ArubaOS-multiple-vulnerabilities-36283cnnvd
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txtcnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.3458cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021090213cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdfenisa_euvd
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txtenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan