CVE-2019-5321: Arubanetworks 2530 Firmware

High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.

Affected products

• Arubanetworks 2530 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 2540 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 2920 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 2930 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 3810 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 5400r Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)

Published 2020-08-26. Last modified 2026-06-17.