CVE-2019-5318: Arubanetworks Arubaos

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability.

Affected products

  • Arubanetworks Arubaos: from 6.1.3.7, up to and including 6.5.4.20; from 8.0.0.0, before 8.8.0.0 (fixed in 8.8.0.0)
  • Siemens Scalance w1750d Firmware: affected versions not specified

Published 2021-09-07. Last modified 2026-06-17.