Arubanetworks 2920 Firmware vulnerabilities

5 CVEs affecting Arubanetworks 2920 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23677, published 2022-05-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-23676, published 2022-05-10. Critical severity, CVSS 9.8. EPSS: 23% chance of exploitation in the next 30 days. A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions;…
CVE-2022-23677, published 2022-05-10. High severity, CVSS 8.1. EPSS: 20.5% chance of exploitation in the next 30 days. A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions;…
CVE-2019-5321, published 2020-08-26. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to…
CVE-2019-5322, published 2020-02-13. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The…
CVE-2019-5320, published 2020-08-26. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to…