Aruba SD-WAN Software and Gateways; Aruba Operating System Software

11 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-37731Prior to 8.6.0.0-2.2.0.4 ; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): PriorMEDIUM 6.20.3 %
CVE-2021-37725Prior to 8.6.0.4-2.2.0.4 ; Prior to 8.8.0.1, 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System SoftwaHIGH 8.10.4 %
CVE-2021-37733Prior to 8.6.0.4-2.2.0.4 ; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8.3.0.16A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): PrioMEDIUM 4.91.2 %
CVE-2021-37729Prior to 8.6.0.0-2.2.0.4 ; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6.4.4.25A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): PrioMEDIUM 6.51.0 %
CVE-2021-37721Prior to 8.6.0.4-2.2.0.4 ; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software verHIGH 7.23.1 %
CVE-2021-37718Prior to 8.6.0.4-2.2.0.6 ; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software verHIGH 7.23.1 %
CVE-2021-37722Prior to 8.6.0.4-2.2.0.4 ; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software verHIGH 7.23.1 %
CVE-2021-37720Prior to 8.6.0.4-2.2.0.4 ; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software verHIGH 7.23.1 %
CVE-2021-37719Prior to 8.6.0.4-2.2.0.4 ; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software verHIGH 7.22.9 %
CVE-2021-37717Prior to 8.6.0.4-2.2.0.6 ; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software verHIGH 7.23.1 %
CVE-2021-37716Prior to 8.6.0.4-2.2.0.4 ; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): PriCRITICAL 9.82.4 %