9.8
CVSSv3

CVE-2016-2031

Published: 31/01/2020 Updated: 10/11/2022
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple vulnerabilities exists in Aruba Instate prior to 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

arubanetworks arubaos

arubanetworks aruba instant 4.2.3.1

arubanetworks aruba instant

arubanetworks airwave

siemens scalance_w1750d_firmware

Exploits

Multiple vulnerabilities were identified in Aruba AP, IAP and AMP devices The vulnerabilities were discovered during a black box security assessment and therefore the vulnerability list should not be considered exhaustive Several of the high severity vulnerabilities listed in this report are related to the Aruba proprietary PAPI protocol and allo ...

Recent Articles

Aruba! Aruba! Patch now, patch fast!
The Register • Richard Chirgwin • 09 May 2016

Google bug-hunters disclose 26 vulnerabilities

Aruba Networks is slinging patches at a bunch of vulnerabilities in management platforms, its Aruba Instant Platform, and its proprietary ArubaOS PAPI management API. The company posted three advisories here after Google put it on a 90-day deadline, with the Chocolate Factory's Sven Blumenstein dropping a consolidated report of 26 individual vulns at Full Disclosure on Friday. Al are considered “urgent”, according to the HP subsidiary. In a tone of some irritation, Aruba says it's “remindi...