CVE-2021-37728: Arubanetworks Arubaos

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for ArubaOS that address this security vulnerability.

Affected products

• Arubanetworks Arubaos: from 8.5.0.0, before 8.5.0.13 (fixed in 8.5.0.13); from 8.6.0.0, before 8.6.0.11 (fixed in 8.6.0.11); from 8.7.0.0, before 8.7.1.4 (fixed in 8.7.1.4); from 8.8.0.0, before 8.8.0.1 (fixed in 8.8.0.1)
• Siemens Scalance w1750d Firmware: up to and including 8.7.1.3

Published 2021-09-07. Last modified 2026-06-17.