CVE-2021-25141: arubanetworks aruba_2530ya_firmware
Vulnerability summary
CVE-2021-25141 is a medium (CVSS 4.9) vulnerability in arubanetworks aruba_2530ya_firmware. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 20.8% of scored vulnerabilities.
Timeline
- 09-02-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.30%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
0.00 pp
From 0.30% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Arubanetworks11 products
- aruba_2530ya_firmware< ya.16.10.0012
- aruba_2530yb_firmware< yb.16.10.0012
- aruba_2540_firmware< yc.16.10.0012
- aruba_2620_firmware< ra.16.04.0022
- aruba_2920_firmware< wb.16.10.0011
Hpe4 products
- 3500_firmware< k.16.02.0032
- 3500_yl_firmware< k.16.02.0032
- 6200_yl_firmware< k.15.18.0024
- 8200_zl_firmware< k.15.18.0024
2 vendors · 15 products
References
1 links- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04082en_usX Refsource MISCThird Party Advisory