NetSight
IP …
medium5.9Public exploit code

CVE-2021-25158

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and be…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

Affected products

VendorProductAffected versions
ArubanetworksInstant
from 6.5.0.0 before 6.5.4.19
from 8.3.0.0 before 8.3.0.15
from 8.5.0.0 before 8.5.0.12
from 8.6.0.0 before 8.6.0.8
from 8.7.0.0 before 8.7.1.2
SiemensScalance W1750d Firmware
from 8.7.0 before 8.7.1.3

Weakness classification

CWE-362

References