Aruba Update
2895Warning Date
Severity Level
Warning Number
Target Sector
13 January, 2021
● Critical
2021-2315
All
Description:
Aruba has released a security update to address several vulnerabilities in the following product:
- AirWave Glass
- 1.3.2 and below
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Server-side request forgery (SSRF)
- Remote Command Injection
- Remote Command Execution
Best practice and Recommendations:
The CERT team encourages users to review Aruba security advisory and apply the necessary update: