CVE-2021-41002
Last modified
CVE-2021-41002 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.. EPSS estimates a 0.94% chance of exploitation in the next 30 days.
Description
Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hpe | Arubaos-Cx | >= 10.06.0001, <= 10.06.0170 |
| Hpe | Arubaos-Cx | >= 10.07.0001, <= 10.07.0050 |
| Hpe | Arubaos-Cx | >= 10.08.0001, <= 10.08.1030 |
| Hpe | Arubaos-Cx | >= 10.09.0001, <= 10.09.0002 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-41002?
How severe is CVE-2021-41002?
How do I fix CVE-2021-41002?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-40997A remote authentication bypass vulnerability was discovered …9.8
- CVE-2021-40998A remote arbitrary command execution vulnerability was disco…7.2
- CVE-2021-40999A remote arbitrary command execution vulnerability was disco…7.2
- CVE-2021-4100Object lifecycle issue in ANGLE in Google Chrome prior to 96…8.8
- CVE-2021-41000Multiple authenticated remote code execution vulnerabilities…8.8
- CVE-2021-41001An authenticated remote code execution vulnerability was dis…8.8
- CVE-2021-41003Multiple unauthenticated command injection vulnerabilities w…6.1
- CVE-2021-41004A remote vulnerability was discovered in Aruba Instant On 19…7.5
- CVE-2021-41005A remote vulnerability was discovered in Aruba Instant On 19…6.5
- CVE-2021-41006Rejected reason: CVE was unused by HPE.
- CVE-2021-41007Rejected reason: CVE was unused by HPE.
- CVE-2021-41008Rejected reason: CVE was unused by HPE.
Are you affected by CVE-2021-41002?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST