Riskcovery

CVE-2021-25141

State
Published
Severity
Not scored
Published
Feb 9, 2021
Updated
Aug 3, 2024
Reserved
Jan 14, 2021

Read the record on cve.org

Description

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Aruba 5400R zl2 Switch Series; Aruba 2930F Switch Series; Aruba 2920 Switch Series; Aruba 2930M Switch Series; Aruba 2530 Switch Series; Aruba 2540 Switch Series; Aruba 3800 Switch Series; HPE 3500 and 3500 yl Switch Series; Aruba 3810M Switch Series; HPE 8200 zl Switch Series; Aruba 2620 Switch Series; Aruba 5400 zl Switch Series; HPE 6200 yl Switch Seriesn/a
  • Prior to KB.16.10.0012Affected
  • - Prior to WC.16.10.0012Affected
  • - Prior to WB.16.10.0011Affected
  • - Aruba 2530YA prior to YA.16.10.0012 / Aruba 2530YB prior YB.16.10.0012Affected
  • - Prior to YC.16.10.0012Affected
  • - Prior to KA.16.04.0022Affected
  • - Prior to K.16.02.0032Affected
  • - Prior to KB.16.10.0012Affected
  • - Prior to K.15.18.0024Affected
  • - Prior to RA.16.04.0022Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.