Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2019-5321: Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to...
CVE-2019-5321 · published 6 years ago
Summary
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| arubanetworks | 5400r_firmware |
>= 16.08.0, < 16.08.0009 >= 16.09.0, < 16.09.0007 >= 16.10.0, < 16.10.0003 cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:* |
| arubanetworks | 3810_firmware |
>= 16.08.0, < 16.08.0009 >= 16.09.0, < 16.09.0007 >= 16.10.0, < 16.10.0003 cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:* |
| arubanetworks | 2920_firmware |
>= 16.08.0, < 16.08.0009 >= 16.09.0, < 16.09.0007 >= 16.10.0, < 16.10.0003 cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:* |
| arubanetworks | 2930_firmware |
>= 16.08.0, < 16.08.0009 >= 16.09.0, < 16.09.0007 >= 16.10.0, < 16.10.0003 cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:* |
| arubanetworks | 2530_firmware |
>= 16.08.0, < 16.08.0009 >= 16.09.0, < 16.09.0007 >= 16.10.0, < 16.10.0003 cpe:2.3:o:arubanetworks:2530_firmware:*:*:*:*:*:*:*:* |
| arubanetworks | 2540_firmware |
>= 16.08.0, < 16.08.0009 >= 16.09.0, < 16.09.0007 >= 16.10.0, < 16.10.0003 cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:* |
Original advisory text
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to...
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.
References
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published26 Aug 2020
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2019-5321 · NVD
Track software like this
Free during beta