CVE-2019-5322
A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - security-alert@hpe.com
- Published
- 2020-02-13
- Last modified
- 2024-08-04
Affected products
- 2530 10/100 Port Firmware (Arubanetworks)
- 2530 With Gigt Port Firmware (Arubanetworks)
- 2540 Firmware (Arubanetworks)
- 2920 Firmware (Arubanetworks)
- 2930 Firmware (Arubanetworks)
- 3810 Firmware (Arubanetworks)
- 5400r Firmware (Arubanetworks)
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt
