Search
Find a vulnerability
Search criteria
1 vulnerability found for 3500 by hpe
VAR-202102-1333
Vulnerability from variot - Updated: 2024-11-23 22:47A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability. Arubanetwork Aruba/HPE is a switch made by Arubanetwork in the United States. A large number of ports for cable connection are provided, so that star topology wiring can be adopted
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202102-1333",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "aruba 2530yb",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "yb.16.10.0012"
},
{
"model": "aruba 2930m",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "wc.16.10.0012"
},
{
"model": "aruba 5406r zl2",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "kb.16.10.0012"
},
{
"model": "3500",
"scope": "lt",
"trust": 1.0,
"vendor": "hpe",
"version": "k.16.02.0032"
},
{
"model": "6200 yl",
"scope": "lt",
"trust": 1.0,
"vendor": "hpe",
"version": "k.15.18.0024"
},
{
"model": "aruba 2930f",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "wc.16.10.0012"
},
{
"model": "8200 zl",
"scope": "lt",
"trust": 1.0,
"vendor": "hpe",
"version": "k.15.18.0024"
},
{
"model": "aruba 3810m",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "kb.16.10.0012"
},
{
"model": "aruba 5412r zl2",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "kb.16.10.0012"
},
{
"model": "aruba 2530ya",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "ya.16.10.0012"
},
{
"model": "3500 yl",
"scope": "lt",
"trust": 1.0,
"vendor": "hpe",
"version": "k.16.02.0032"
},
{
"model": "aruba 2920",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "wb.16.10.0011"
},
{
"model": "aruba 2620",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "ra.16.04.0022"
},
{
"model": "aruba 3800",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "ka.16.04.0022"
},
{
"model": "aruba 2540",
"scope": "lt",
"trust": 1.0,
"vendor": "arubanetworks",
"version": "yc.16.10.0012"
},
{
"model": "aruba 2930f",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 2920",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 3810m",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 5412r zl2",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 5406r zl2",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 2540",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 2930m",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 3800",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 2620",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba 2530ya",
"scope": null,
"trust": 0.8,
"vendor": "\u30a2\u30eb\u30d0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "aruba/hpe",
"scope": null,
"trust": 0.6,
"vendor": "arubanetwork",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"cve": "CVE-2021-25141",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2021-25141",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CNVD-2021-44672",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 0.8,
"id": "CVE-2021-25141",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 4.4,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2021-25141",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "High",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2021-25141",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2021-25141",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2021-44672",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202102-661",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "CNNVD",
"id": "CNNVD-202102-661"
},
{
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch\u0027s management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability. Arubanetwork Aruba/HPE is a switch made by Arubanetwork in the United States. A large number of ports for cable connection are provided, so that star topology wiring can be adopted",
"sources": [
{
"db": "NVD",
"id": "CVE-2021-25141"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "CNVD",
"id": "CNVD-2021-44672"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2021-25141",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2021-44672",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202102-661",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "CNNVD",
"id": "CNNVD-202102-661"
},
{
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"id": "VAR-202102-1333",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
}
]
},
"last_update_date": "2024-11-23T22:47:41.730000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "top page Hewlett Packard Enterprise HPE\u00a0Security\u00a0Bulletin",
"trust": 0.8,
"url": "https://www.arubanetworks.com/ja/"
},
{
"title": "Patch for Arubanetwork Aruba/HPE has unspecified vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/274756"
},
{
"title": "Arubanetwork Aruba/HPE Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=141788"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "CNNVD",
"id": "CNNVD-202102-661"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "Other (CWE-Other) [NVD Evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://support.hpe.com/hpsc/doc/public/display?doclocale=en_us\u0026docid=emr_na-hpesbnw04082en_us"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-25141"
},
{
"trust": 0.6,
"url": "https://vigilance.fr/vulnerability/aruba-hpe-switch-denial-of-service-via-management-interface-34510"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "CNNVD",
"id": "CNNVD-202102-661"
},
{
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"db": "CNNVD",
"id": "CNNVD-202102-661"
},
{
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-06-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"date": "2021-11-01T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"date": "2021-02-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202102-661"
},
{
"date": "2021-02-09T17:15:14.780000",
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-06-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-44672"
},
{
"date": "2021-11-01T08:16:00",
"db": "JVNDB",
"id": "JVNDB-2021-003667"
},
{
"date": "2021-02-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202102-661"
},
{
"date": "2024-11-21T05:54:25.993000",
"db": "NVD",
"id": "CVE-2021-25141"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202102-661"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural \u00a0HPE\u00a0 and \u00a0Aruba\u00a0L2/L3\u00a0 Vulnerability in switch firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-003667"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202102-661"
}
],
"trust": 0.6
}
}