CVE-2021-25167

HIGH

Aruba AirWave < 8.2.12.1 - Unauthenticated Remote Code Execution

Title source: llm
STIX 2.1

Description

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0094
EPSS Percentile 76.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
arubanetworks/airwave < 8.2.12.1
Published Apr 29, 2021
Tracked Since Feb 18, 2026