CVE-2020-24637 (GCVE-0-2020-24637)

Vulnerability from cvelistv5 – Published: 2020-12-11 01:33 – Updated: 2024-08-04 15:19
VLAI?
Summary
Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.
Severity ?
No CVSS data available.
CWE
  • remote buffer overflow
Assigner
hpe
References
Impacted products
Vendor Product Version
n/a Aruba 9000 Gateway Affected: 2.1.0.1
Affected: 2.2.0.0 and below
    n/a Aruba 7000 Series Mobility Controllers Affected: 6.4.4.23
Affected: 6.5.4.17
Affected: 8.2.2.9
Affected: 8.3.0.13
Affected: 8.5.0.10
Affected: 8.6.0.5
Affected: 8.7.0.0 and below
    n/a Aruba 7200 Series Mobility Controllers Affected: 6.4.4.23
Affected: 6.5.4.17
Affected: 8.2.2.9
Affected: 8.3.0.13
Affected: 8.5.0.10
Affected: 8.6.0.5
Affected: 8.7.0.0 and below
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:19:09.053Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Aruba 9000 Gateway",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "2.1.0.1"
            },
            {
              "status": "affected",
              "version": "2.2.0.0 and below"
            }
          ]
        },
        {
          "product": "Aruba 7000 Series Mobility Controllers",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "6.4.4.23"
            },
            {
              "status": "affected",
              "version": "6.5.4.17"
            },
            {
              "status": "affected",
              "version": "8.2.2.9"
            },
            {
              "status": "affected",
              "version": "8.3.0.13"
            },
            {
              "status": "affected",
              "version": "8.5.0.10"
            },
            {
              "status": "affected",
              "version": "8.6.0.5"
            },
            {
              "status": "affected",
              "version": "8.7.0.0 and below"
            }
          ]
        },
        {
          "product": "Aruba 7200 Series Mobility Controllers",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "6.4.4.23"
            },
            {
              "status": "affected",
              "version": "6.5.4.17"
            },
            {
              "status": "affected",
              "version": "8.2.2.9"
            },
            {
              "status": "affected",
              "version": "8.3.0.13"
            },
            {
              "status": "affected",
              "version": "8.5.0.10"
            },
            {
              "status": "affected",
              "version": "8.6.0.5"
            },
            {
              "status": "affected",
              "version": "8.7.0.0 and below"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "remote buffer overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-11T01:33:22",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-alert@hpe.com",
          "ID": "CVE-2020-24637",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Aruba 9000 Gateway",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.1.0.1"
                          },
                          {
                            "version_value": "2.2.0.0 and below"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Aruba 7000 Series Mobility Controllers",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "6.4.4.23"
                          },
                          {
                            "version_value": "6.5.4.17"
                          },
                          {
                            "version_value": "8.2.2.9"
                          },
                          {
                            "version_value": "8.3.0.13"
                          },
                          {
                            "version_value": "8.5.0.10"
                          },
                          {
                            "version_value": "8.6.0.5"
                          },
                          {
                            "version_value": "8.7.0.0 and below"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Aruba 7200 Series Mobility Controllers",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "6.4.4.23"
                          },
                          {
                            "version_value": "6.5.4.17"
                          },
                          {
                            "version_value": "8.2.2.9"
                          },
                          {
                            "version_value": "8.3.0.13"
                          },
                          {
                            "version_value": "8.5.0.10"
                          },
                          {
                            "version_value": "8.6.0.5"
                          },
                          {
                            "version_value": "8.7.0.0 and below"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "remote buffer overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2020-24637",
    "datePublished": "2020-12-11T01:33:22",
    "dateReserved": "2020-08-25T00:00:00",
    "dateUpdated": "2024-08-04T15:19:09.053Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"8.5.0.11\", \"matchCriteriaId\": \"54105104-BEC9-4E17-BE32-96F2111310F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"8.6.0.0\", \"versionEndExcluding\": \"8.6.0.6\", \"matchCriteriaId\": \"C6A4597E-0267-4DA8-BFFB-513BEA7D04D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"8.7.0.0\", \"versionEndExcluding\": \"8.7.1.0\", \"matchCriteriaId\": \"894088FF-5838-4CE7-AA31-CE7FB247E271\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7005:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FE128072-9444-40D5-AC86-BB317869EB97\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7008:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F747F71E-66BC-4776-BCCC-3123F8EEEBC6\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"59612211-5054-44DC-B028-61A2C5C6133D\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7024:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"15FE873C-3C45-4EA3-9AD1-D07F132BC31F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E8E68DB6-149B-4469-BD27-69F1AC59166F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E9AA178-1327-402E-8740-8409ECA448BC\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9969F899-4D7A-4DD5-B81D-DB16B20CF86A\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF33BAD0-0596-4910-B096-99E2033F73D8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDDFDA5E-3895-463A-86EA-1823EC1B5045\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.1.0.2\", \"matchCriteriaId\": \"A206DE28-E15A-437B-BC1C-261F32F24F3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.2.0.0\", \"versionEndExcluding\": \"2.2.0.1\", \"matchCriteriaId\": \"A1D1957E-1DFE-495B-8DF5-C1640857DDF4\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CFA13FF5-7C60-48B4-AF46-18A9F19D5D42\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"17162DB3-973E-47C6-9157-39A0E94603F2\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.\"}, {\"lang\": \"es\", \"value\": \"Dos vulnerabilidades en la implementaci\\u00f3n de ArubaOS GRUB2 permiten a un atacante omitir el arranque seguro.\u0026#xa0;Una explotaci\\u00f3n con \\u00e9xito de esta vulnerabilidad podr\\u00eda conllevar a un compromiso remoto de la integridad del sistema al permitir a un atacante cargar un kernel modificado o no confiable en Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers versiones: 2.1.0.1, 2.2.0.0 y anteriores;\u0026#xa0;6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 y por debajo;\u0026#xa0;6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 y por debajo\"}]",
      "id": "CVE-2020-24637",
      "lastModified": "2024-11-21T05:15:18.577",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.2, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:C/I:C/A:C\", \"baseScore\": 9.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2020-12-11T02:15:11.117",
      "references": "[{\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us\", \"source\": \"security-alert@hpe.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "security-alert@hpe.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2020-24637\",\"sourceIdentifier\":\"security-alert@hpe.com\",\"published\":\"2020-12-11T02:15:11.117\",\"lastModified\":\"2024-11-21T05:15:18.577\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.\"},{\"lang\":\"es\",\"value\":\"Dos vulnerabilidades en la implementaci\u00f3n de ArubaOS GRUB2 permiten a un atacante omitir el arranque seguro.\u0026#xa0;Una explotaci\u00f3n con \u00e9xito de esta vulnerabilidad podr\u00eda conllevar a un compromiso remoto de la integridad del sistema al permitir a un atacante cargar un kernel modificado o no confiable en Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers versiones: 2.1.0.1, 2.2.0.0 y anteriores;\u0026#xa0;6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 y por debajo;\u0026#xa0;6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 y por debajo\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:C/I:C/A:C\",\"baseScore\":9.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.5.0.11\",\"matchCriteriaId\":\"54105104-BEC9-4E17-BE32-96F2111310F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.6.0.0\",\"versionEndExcluding\":\"8.6.0.6\",\"matchCriteriaId\":\"C6A4597E-0267-4DA8-BFFB-513BEA7D04D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.7.0.0\",\"versionEndExcluding\":\"8.7.1.0\",\"matchCriteriaId\":\"894088FF-5838-4CE7-AA31-CE7FB247E271\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7005:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE128072-9444-40D5-AC86-BB317869EB97\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7008:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F747F71E-66BC-4776-BCCC-3123F8EEEBC6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59612211-5054-44DC-B028-61A2C5C6133D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7024:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15FE873C-3C45-4EA3-9AD1-D07F132BC31F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8E68DB6-149B-4469-BD27-69F1AC59166F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E9AA178-1327-402E-8740-8409ECA448BC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9969F899-4D7A-4DD5-B81D-DB16B20CF86A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF33BAD0-0596-4910-B096-99E2033F73D8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDDFDA5E-3895-463A-86EA-1823EC1B5045\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.1.0.2\",\"matchCriteriaId\":\"A206DE28-E15A-437B-BC1C-261F32F24F3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.2.0.0\",\"versionEndExcluding\":\"2.2.0.1\",\"matchCriteriaId\":\"A1D1957E-1DFE-495B-8DF5-C1640857DDF4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFA13FF5-7C60-48B4-AF46-18A9F19D5D42\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17162DB3-973E-47C6-9157-39A0E94603F2\"}]}]}],\"references\":[{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us\",\"source\":\"security-alert@hpe.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04072en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.