Search/CVE-2019-5322
● CVE — High

CVE-2019-5322

VendorarubanetworksProduct2530 10/100 port firmware, 2530 with gigt port firmware, 2540 firmware, 2920 firmware, 2930 firmware, 3810 firmware, 5400r firmwareDiscoveredFeb 13, 2020UpdatedNov 21, 2024

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.

CVSS v3.1
7.5 HIGH
EPSS
1.16%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
disclosure → media coverage
Feb 13, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024