Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

62 records in Scalance W1750d Firmware · all components

Priority MEDIUM 57

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and be…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.25765 Published 2021-03-30 No fix listed CWE-78
TI-2017-09737 CVE-2017-13099 · GHSA-97gp-82pc-qc6x

wolfSSL Bleichenbacher/ROBOT

Priority MEDIUM 55

wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.27383 Published 2017-12-13 Fixed in 3.12.2 CWE-203
Priority MEDIUM 54

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculati…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.24639 Published 2021-11-11 No fix listed CWE-400
Priority MEDIUM 50

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.30459 Published 2021-03-30 No fix listed CWE-362
Priority MEDIUM 50

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.3965 Published 2021-03-30 No fix listed
TI-2018-05147 CVE-2018-7084 · GHSA-pxhj-rpvv-rcrx

OS command injection in Aruba Instant

Priority MEDIUM 50

A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04631 Published 2019-05-10 No fix listed CWE-78
Priority MEDIUM 50

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass secu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05123 Published 2020-01-31 No fix listed CWE-20
Priority MEDIUM 48

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03653 Published 2021-03-29 No fix listed CWE-78
TI-2021-15601 CVE-2021-37726 · GHSA-gmgh-mrc4-vrr5

Buffer overflow in HPE Aruba Instant

Priority MEDIUM 47

A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02409 Published 2021-10-12 No fix listed CWE-120
Priority MEDIUM 47

A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02409 Published 2021-09-07 Fixed in 8.6.0.4-2.2.0.4 CWE-120
Priority MEDIUM 47

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02694 Published 2021-03-30 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02054 Published 2022-10-06 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01868 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01868 Published 2022-10-07 No fix listed CWE-120
Priority MEDIUM 46

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01828 Published 2021-03-29 No fix listed CWE-120
Priority MEDIUM 44

A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.16372 Published 2021-03-30 No fix listed CWE-79
Priority MEDIUM 44

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03152 Published 2021-03-30 No fix listed CWE-78
Priority MEDIUM 43

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.12573 Published 2021-03-30 No fix listed
Priority MEDIUM 43

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.1242 Published 2021-03-30 No fix listed
Priority MEDIUM 43

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0238 Published 2021-03-29 No fix listed CWE-120
Load more
Open these records in search →