CVE-2016-2031 Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious...
CriticalCVSS 9.8
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks airwave | < 8.2.0.0 | 8.2.0.0 |
| arubanetworks aruba instant | < 4.1.3.0 | 4.1.3.0 |
| arubanetworks aruba instant | = 4.2.3.1 | No fix listed |
| arubanetworks arubaos | All versions | No fix listed |
| Siemens scalance w1750d firmware | All versions | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- seclists.org exploit mailing-list third-party-advisory
- www.arubanetworks.com vendor-advisory
- cert-portal.siemens.com third-party-advisory
- www.securityfocus.com broken-link