FKIE_CVE-2021-25141

Vulnerability from fkie_nvd - Published: 2021-02-09 17:15 - Updated: 2024-11-21 05:54
Severity ?
4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Summary
A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability.
References
security-alert@hpe.comhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04082en_usThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04082en_usThird Party Advisory
Impacted products
Vendor Product Version
arubanetworks aruba_5406r_zl2_firmware *
arubanetworks aruba_5406r_zl2 -
arubanetworks aruba_5412r_zl2_firmware *
arubanetworks aruba_5412r_zl2 -
arubanetworks aruba_3810m_firmware *
arubanetworks aruba_3810m -
arubanetworks aruba_2930m_firmware *
arubanetworks aruba_2930m -
arubanetworks aruba_2930f_firmware *
arubanetworks aruba_2930f -
arubanetworks aruba_2920_firmware *
arubanetworks aruba_2920 -
arubanetworks aruba_2540_firmware *
arubanetworks aruba_2540 -
arubanetworks aruba_2530ya_firmware *
arubanetworks aruba_2530ya -
arubanetworks aruba_3800_firmware *
arubanetworks aruba_3800 -
arubanetworks aruba_2620_firmware *
arubanetworks aruba_2620 -
hpe 8200_zl_firmware *
hpe 8200_zl -
hpe 6200_yl_firmware *
hpe 6200_yl -
hpe 3500_firmware *
hpe 3500 -
hpe 3500_yl_firmware *
hpe 3500_yl -
arubanetworks aruba_2530yb_firmware *
arubanetworks aruba_2530yb -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_5406r_zl2_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "972DC214-38A9-4FD2-B711-F9DDEB728EDB",
              "versionEndExcluding": "kb.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_5406r_zl2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E982204-9ADC-4242-86C2-A407D6EA7DB0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_5412r_zl2_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B97B63E2-2EB1-41FB-A4F5-50E9E9569B6C",
              "versionEndExcluding": "kb.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_5412r_zl2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8549CD94-50E2-4615-94C2-D76FADFBA3AC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_3810m_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA016A24-FC1F-4F47-AA50-874251107CF5",
              "versionEndExcluding": "kb.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_3810m:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3CE933B-68BA-45BA-81BD-95D873B858B1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_2930m_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F800D447-86D0-4435-9337-5B0D55E96F15",
              "versionEndExcluding": "wc.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_2930m:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2561E158-FB61-4FFD-B680-DADF7BC2C6D1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_2930f_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "48B6242A-87BC-48AA-9546-BA1FFF6E507C",
              "versionEndExcluding": "wc.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_2930f:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "97C4FCD2-BB70-4848-B08A-223B5C3467BB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_2920_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "84310DE6-B19A-4091-BA29-6BDF6EAE3C31",
              "versionEndExcluding": "wb.16.10.0011",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_2920:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1782D4A-AD68-4BD2-8453-EE22BCF2DC99",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_2540_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "590322F9-884D-4598-B222-D04E13AE2350",
              "versionEndExcluding": "yc.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_2540:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDEDD15E-289E-4B15-8620-547EA19CAEE7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_2530ya_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1B21AAC-2F95-4EE9-9DFD-2864E0AD5172",
              "versionEndExcluding": "ya.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_2530ya:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8251986-B9F2-4345-A4D7-EB3737F12AE0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_3800_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "80404698-66D6-4649-AF49-B37EF53CC220",
              "versionEndExcluding": "ka.16.04.0022",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_3800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "50450263-8198-4A93-A317-86B8A0485328",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_2620_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA814B89-CF8A-464F-BD47-7B18CBEA7881",
              "versionEndExcluding": "ra.16.04.0022",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_2620:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F10B7C2-A4A5-4EDC-B5CD-F645DF518125",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hpe:8200_zl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C07219AB-7F2C-4384-A029-F7DBC6330555",
              "versionEndExcluding": "k.15.18.0024",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hpe:8200_zl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A726CBA0-CA79-4903-BD50-4455B7667C43",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hpe:6200_yl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1FE2140-4A8C-4C46-A899-B023E330634F",
              "versionEndExcluding": "k.15.18.0024",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hpe:6200_yl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "147CA290-22E2-498E-B925-6D85F44823DE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hpe:3500_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "12442248-51A1-40CD-A25B-DF347341B8FC",
              "versionEndExcluding": "k.16.02.0032",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hpe:3500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28168255-648C-4D4B-A765-1F0DE777E3F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hpe:3500_yl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "703F3FE8-21A7-4938-96B9-C4A838FCB6FE",
              "versionEndExcluding": "k.16.02.0032",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hpe:3500_yl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "91BBD047-E3C6-4AEA-B7B8-7BC4600E4E6A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aruba_2530yb_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "201787FA-8CAC-457A-B7CC-76575A0DF0F3",
              "versionEndExcluding": "yb.16.10.0012",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:aruba_2530yb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D7A8F42-55C8-4A2B-8A34-1B1B8BE3BEDF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch\u0027s management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad de seguridad en determinado firmware del switch HPE y Aruba L2/L3.\u0026#xa0;Se identific\u00f3 un error de procesamiento de datos debido al manejo inapropiado de un tipo de datos inesperado en la informaci\u00f3n suministrada por el usuario a la interfaz de administraci\u00f3n del switch.\u0026#xa0;El error de procesamiento de datos podr\u00eda ser explotado para causar un bloqueo o reinicio en la interfaz de administraci\u00f3n del switch y/o posiblemente el propio switch, conllevando a una denegaci\u00f3n de servicio (DoS) local.\u0026#xa0;El usuario debe tener privilegios de administrador para explotar esta vulnerabilidad"
    }
  ],
  "id": "CVE-2021-25141",
  "lastModified": "2024-11-21T05:54:25.993",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 4.9,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-02-09T17:15:14.780",
  "references": [
    {
      "source": "security-alert@hpe.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04082en_us"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04082en_us"
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.