CVE-2021-25141
A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability.
Published:Feb 9, 2021
Last Modified:Nov 21, 2024
EPS:Feb 9, 2021
EPSS Score:0.00127
CVSS Score:4.4
Affected Products
Vendor
Product
Action
Vendor
Arubanetworks
Product
Aruba 2530ya
Arubanetworks
Aruba 2530ya
Vendor
Arubanetworks
Product
Aruba 2530ya Firmware
Arubanetworks
Aruba 2530ya Firmware
Vendor
Arubanetworks
Product
Aruba 2530yb
Arubanetworks
Aruba 2530yb
Vendor
Arubanetworks
Product
Aruba 2530yb Firmware
Arubanetworks
Aruba 2530yb Firmware
Vendor
Arubanetworks
Product
Aruba 2540
Arubanetworks
Aruba 2540
Vendor
Arubanetworks
Product
Aruba 2540 Firmware
Arubanetworks
Aruba 2540 Firmware
Vendor
Arubanetworks
Product
Aruba 2620
Arubanetworks
Aruba 2620
Vendor
Arubanetworks
Product
Aruba 2620 Firmware
Arubanetworks
Aruba 2620 Firmware
Vendor
Arubanetworks
Product
Aruba 2920
Arubanetworks
Aruba 2920
Vendor
Arubanetworks
Product
Aruba 2920 Firmware
Arubanetworks
Aruba 2920 Firmware
Vendor
Arubanetworks
Product
Aruba 2930f
Arubanetworks
Aruba 2930f
Vendor
Arubanetworks
Product
Aruba 2930f Firmware
Arubanetworks
Aruba 2930f Firmware
Vendor
Arubanetworks
Product
Aruba 2930m
Arubanetworks
Aruba 2930m
Vendor
Arubanetworks
Product
Aruba 2930m Firmware
Arubanetworks
Aruba 2930m Firmware
Vendor
Arubanetworks
Product
Aruba 3800
Arubanetworks
Aruba 3800
Vendor
Arubanetworks
Product
Aruba 3800 Firmware
Arubanetworks
Aruba 3800 Firmware
Vendor
Arubanetworks
Product
Aruba 3810m
Arubanetworks
Aruba 3810m
Vendor
Arubanetworks
Product
Aruba 3810m Firmware
Arubanetworks
Aruba 3810m Firmware
Vendor
Arubanetworks
Product
Aruba 5406r Zl2
Arubanetworks
Aruba 5406r Zl2
Vendor
Arubanetworks
Product
Aruba 5406r Zl2 Firmware
Arubanetworks
Aruba 5406r Zl2 Firmware
Vendor
Arubanetworks
Product
Aruba 5412r Zl2
Arubanetworks
Aruba 5412r Zl2
Vendor
Arubanetworks
Product
Aruba 5412r Zl2 Firmware
Arubanetworks
Aruba 5412r Zl2 Firmware
Vendor
Hpe
Product
3500
Hpe
3500
Vendor
Hpe
Product
3500 Firmware
Hpe
3500 Firmware
Vendor
Hpe
Product
3500 Yl
Hpe
3500 Yl
Vendor
Hpe
Product
3500 Yl Firmware
Hpe
3500 Yl Firmware
Vendor
Hpe
Product
6200 Yl
Hpe
6200 Yl
Vendor
Hpe
Product
6200 Yl Firmware
Hpe
6200 Yl Firmware
Vendor
Hpe
Product
8200 Zl
Hpe
8200 Zl
Vendor
Hpe
Product
8200 Zl Firmware
Hpe
8200 Zl Firmware
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
