CVE-2021-37726
CRITICALArubanetworks Aruba Instant < 8.7.1.3 - Buffer Overflow
Title source: ruleDescription
A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt
Third Party Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
Scores
CVSS v3
9.8
EPSS
0.0138
EPSS Percentile
80.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (2)
arubanetworks/aruba_instant
8.7.0.0 - 8.7.1.3
siemens/scalance_w1750d_firmware
< 8.7.1.3
Published
Oct 12, 2021
Tracked Since
Feb 18, 2026