CVE-2021-41003
Last modified
CVE-2021-41003 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.. EPSS estimates a 0.78% chance of exploitation in the next 30 days.
Description
Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hpe | Arubaos-Cx | >= 10.06.0001, <= 10.06.0170 |
| Hpe | Arubaos-Cx | >= 10.07.0001, <= 10.07.0050 |
| Hpe | Arubaos-Cx | >= 10.08.0001, <= 10.08.1030 |
| Hpe | Arubaos-Cx | >= 10.09.0001, <= 10.09.0002 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-41003?
How severe is CVE-2021-41003?
How do I fix CVE-2021-41003?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-40998A remote arbitrary command execution vulnerability was disco…7.2
- CVE-2021-40999A remote arbitrary command execution vulnerability was disco…7.2
- CVE-2021-4100Object lifecycle issue in ANGLE in Google Chrome prior to 96…8.8
- CVE-2021-41000Multiple authenticated remote code execution vulnerabilities…8.8
- CVE-2021-41001An authenticated remote code execution vulnerability was dis…8.8
- CVE-2021-41002Multiple authenticated remote path traversal vulnerabilities…8.1
- CVE-2021-41004A remote vulnerability was discovered in Aruba Instant On 19…7.5
- CVE-2021-41005A remote vulnerability was discovered in Aruba Instant On 19…6.5
- CVE-2021-41006Rejected reason: CVE was unused by HPE.
- CVE-2021-41007Rejected reason: CVE was unused by HPE.
- CVE-2021-41008Rejected reason: CVE was unused by HPE.
- CVE-2021-41009Rejected reason: CVE was unused by HPE.
Are you affected by CVE-2021-41003?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST