← back
CVE-2021-25155

CVE-2021-25155

EPSS 13.3%
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
Affected products
n/a · Aruba Instant Access Points
public PoCs found — 4
cve_referencepacketstormsecurity.com/files/163524/Aruba-Instant-8.7.1.0-Arbitrary-File-Modification.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50136unverifiedexploitdbwww.exploit-db.com/exploits/50133unverifiedcve_referencepacketstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.htmlunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/163524/Aruba-Instant-8.7.1.0-Arbitrary-File-Modification.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdfhttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt