7.5

CVE-2019-5322

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arubanetworks ≫ 5400r Firmware Version >= 16.08.0 < 16.08.0009
   Arubanetworks ≫ 5400r Version -
Arubanetworks ≫ 5400r Firmware Version >= 16.09.0 < 16.09.0007
   Arubanetworks ≫ 5400r Version -
Arubanetworks ≫ 5400r Firmware Version >= 16.10.0 < 16.10.0003
   Arubanetworks ≫ 5400r Version -
Arubanetworks ≫ 3810 Firmware Version >= 16.08.0 < 16.08.0009
   Arubanetworks ≫ 3810 Version -
Arubanetworks ≫ 3810 Firmware Version >= 16.09.0 < 16.09.0007
   Arubanetworks ≫ 3810 Version -
Arubanetworks ≫ 3810 Firmware Version >= 16.10.0 < 16.10.0003
   Arubanetworks ≫ 3810 Version -
Arubanetworks ≫ 2920 Firmware Version >= 16.08.0 < 16.08.0009
   Arubanetworks ≫ 2920 Version -
Arubanetworks ≫ 2920 Firmware Version >= 16.09.0 < 16.09.0007
   Arubanetworks ≫ 2920 Version -
Arubanetworks ≫ 2920 Firmware Version >= 16.10.0 < 16.10.0003
   Arubanetworks ≫ 2920 Version -
Arubanetworks ≫ 2930 Firmware Version >= 16.08.0 < 16.08.0009
   Arubanetworks ≫ 2930 Version -
Arubanetworks ≫ 2930 Firmware Version >= 16.09.0 < 16.09.0007
   Arubanetworks ≫ 2930 Version -
Arubanetworks ≫ 2930 Firmware Version >= 16.10.0 < 16.10.0003
   Arubanetworks ≫ 2930 Version -
Arubanetworks ≫ 2530 With Gigt Port Firmware Version >= 16.08.0 < 16.08.0009
   Arubanetworks ≫ 2530 With Gigt Port Version -
Arubanetworks ≫ 2530 With Gigt Port Firmware Version >= 16.09.0 < 16.09.0007
   Arubanetworks ≫ 2530 With Gigt Port Version -
Arubanetworks ≫ 2530 With Gigt Port Firmware Version >= 16.10.0 < 16.10.0003
   Arubanetworks ≫ 2530 With Gigt Port Version -
Arubanetworks ≫ 2530 10/100 Port Firmware Version >= 16.08.0 < 16.08.0009
   Arubanetworks ≫ 2530 10/100 Port Version -
Arubanetworks ≫ 2530 10/100 Port Firmware Version >= 16.09.0 < 16.09.0007
   Arubanetworks ≫ 2530 10/100 Port Version -
Arubanetworks ≫ 2530 10/100 Port Firmware Version >= 16.10.0 < 16.10.0003
   Arubanetworks ≫ 2530 10/100 Port Version -
Arubanetworks ≫ 2540 Firmware Version >= 16.08.0 < 16.08.0009
   Arubanetworks ≫ 2540 Version -
Arubanetworks ≫ 2540 Firmware Version >= 16.09.0 < 16.09.0007
   Arubanetworks ≫ 2540 Version -
Arubanetworks ≫ 2540 Firmware Version >= 16.10.0 < 16.10.0003
   Arubanetworks ≫ 2540 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.16% 0.631
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt
Vendor Advisory