Aruba Update
2908Warning Date
Severity Level
Warning Number
Target Sector
26 August, 2020
● High
2020-1679
All
Description:
Aruba has released security update to address two vulnerabilities in the following products:
- Aruba Intelligent Edge Switches
- 5400R
- 3810
- 2920
- 2930
- 2530 with GigT Port
- 2530 10/100 port
- 2540
- Firmware versions for the aforementioned products:
- 16.08.* before 16.08.0009
- 16.09.* before 16.09.0007
- 16.10.* before 16.10.0003
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Cross-site scripting (XSS) attack
- Remote Unauthorized Access to the Web Management interface.
Best practice and Recommendations:
The CERT team encourages users to review Aruba security advisory and apply the necessary update: