Description
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt
Mitigation, Vendor Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
Scores
CVSS v3
6.5
EPSS
0.0009
EPSS Percentile
24.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-352
Status
published
Products (2)
arubanetworks/arubaos
6.1.3.7 - 6.5.4.20
siemens/scalance_w1750d_firmware
Published
Sep 07, 2021
Tracked Since
Feb 18, 2026