CVE-2021-41002 describes multiple authenticated remote path traversal vulnerabilities in the Aruba AOS-CX command line interface, affecting various Aruba CX 6200F, 6300, 6400, 8320, 8325, 8400, and 8360 Switch Series running specific AOS-CX versions. With a CVSS score of 8.1 (High), this vulnerability allows an authenticated attacker to achieve high integrity and availability impacts with low attack complexity over the network. While Aruba has released patches, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 10.06.0001, <= 10.06.0170CPE matchmatch criteria | cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* | ||
>= 10.07.0001, <= 10.07.0050CPE matchmatch criteria | cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* | ||
>= 10.08.0001, <= 10.08.1030CPE matchmatch criteria | cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* | ||
>= 10.09.0001, <= 10.09.0002CPE matchmatch criteria | cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.