CVE-2021-41003 Details
Description
Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt | CVE | Vendor Advisory |
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| hpe arubaos-cx | >= 10.06.0001, <= 10.06.0170 >= 10.07.0001, <= 10.07.0050 >= 10.08.0001, <= 10.08.1030 >= 10.09.0001, <= 10.09.0002 |
CPE
Remediation
| |
| hpe aruba 8320 | All versions |
CPE
Remediation
| |
| hpe aruba 8325-32-c | All versions |
CPE
Remediation
| |
| hpe aruba 8325-48y8c | All versions |
CPE
Remediation
| |
| hpe aruba 8360-12c | All versions |
CPE
Remediation
| |
| hpe aruba 8360-16y2c | All versions |
CPE
Remediation
| |
| hpe aruba 8360-24xf2c | All versions |
CPE
Remediation
| |
| hpe aruba 8360-32y4c | All versions |
CPE
Remediation
| |
| hpe aruba 8360-48xt4c | All versions |
CPE
Remediation
| |
| hpe aruba 8400x | All versions |
CPE
Remediation
| |
| hpe aruba cx 6200f | All versions |
CPE
Remediation
| |
| hpe aruba cx 6300f | All versions |
CPE
Remediation
| |
| hpe aruba cx 6300m | All versions |
CPE
Remediation
| |
| hpe aruba cx 6405 | All versions |
CPE
Remediation
| |
| hpe aruba cx 6410 | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Sep 27, 2022 | CPE Deprecation Remap | [email protected] |
| Jul 12, 2022 | CWE Remap | [email protected] |
| Mar 10, 2022 | Initial Analysis | [email protected] |