NetSight
medium6.1

CVE-2019-5320

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10…

Impact

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Cross Site Scripting in the web UI, leading to injection of code.

Affected products

VendorProductAffected versions
Arubanetworks5400r Firmware
from 16.08.0 before 16.08.0009
from 16.09.0 before 16.09.0007
from 16.10.0 before 16.10.0003
Arubanetworks3810 Firmware
from 16.08.0 before 16.08.0009
from 16.09.0 before 16.09.0007
from 16.10.0 before 16.10.0003
Arubanetworks2920 Firmware
from 16.08.0 before 16.08.0009
from 16.09.0 before 16.09.0007
from 16.10.0 before 16.10.0003
Arubanetworks2930 Firmware
from 16.08.0 before 16.08.0009
from 16.09.0 before 16.09.0007
from 16.10.0 before 16.10.0003
Arubanetworks2530 Firmware
from 16.08.0 before 16.08.0009
from 16.09.0 before 16.09.0007
from 16.10.0 before 16.10.0003
Arubanetworks2540 Firmware
from 16.08.0 before 16.08.0009
from 16.09.0 before 16.09.0007
from 16.10.0 before 16.10.0003

Weakness classification

References