HPE Aruba Instant On 1930 24g 4sfp/sfp+ Firmware vulnerabilities

2 CVEs affecting HPE Aruba Instant On 1930 24g 4sfp/sfp+ Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-41005, published 2022-04-12.

More from HPE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-41004, published 2022-04-12. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.
• CVE-2021-41005, published 2022-04-12. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.