Arubanetworks Aos-Cx Firmware vulnerabilities

3 CVEs affecting Arubanetworks Aos-Cx Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29149, published 2021-07-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-29143, published 2021-07-22. High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days. A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch…
CVE-2021-29148, published 2021-07-22. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A local cross-site scripting (XSS) vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch…
CVE-2021-29149, published 2021-07-22. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch…