SW
Product
Scalance W1750d Firmware
62
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 22Medium 24Low 1
Watch
Add Scalance W1750d Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-37889 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: All versions, or not specified |
| CVE-2022-37886 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: All versions, or not specified |
| CVE-2022-37887 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: All versions, or not specified |
| CVE-2022-37891 | 9.8 | Oct 7 | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface Affected: All versions, or not specified |
| CVE-2022-37890 | 9.8 | Oct 7 | Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface Affected: All versions, or not specified |
| CVE-2022-37885 | 9.8 | Oct 7 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: All versions, or not specified |
| CVE-2022-37888 | 9.8 | Oct 6 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: All versions, or not specified |
| CVE-2021-37726 | 9.8 | Oct 12 | A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2 Affected: before 8.7.1.3 |
| CVE-2021-37716 | 9.8 | Sep 7 | A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to… Affected: before 8.7.1.3 |
| CVE-2019-5319 | 9.8 | Mar 30 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba… Affected: before 8.7.0 |
| CVE-2021-25149 | 9.8 | Mar 30 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba… Affected: before 8.7.0 |
| CVE-2020-24636 | 9.8 | Mar 29 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: 8.7.0 before 8.7.1.3 |
| CVE-2016-2031 | 9.8 | Jan 31 | Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which… Affected: All versions, or not specified |
| CVE-2018-7084 | 9.8 | May 10 | A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the… Affected: before 8.4.0.1 |
| CVE-2017-14491 | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: before 6.5.1.5 |
| CVE-2021-25150 | 8.8 | Mar 30 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: before 8.7.0 |
| CVE-2021-25144 | 8.8 | Mar 29 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba… Affected: before 8.7.0 |
| CVE-2021-37725 | 8.1 | Sep 7 | A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to… Affected: before 8.7.1.3 |
| CVE-2021-25162 | 8.1 | Mar 30 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and… Affected: 8.7.0 before 8.7.1.3 |
| CVE-2021-25148 | 8.1 | Mar 30 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba… Affected: before 8.7.0 |
| CVE-2022-37893 | 7.8 | Oct 7 | An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface Affected: All versions, or not specified |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: All versions, or not specified |
| CVE-2021-25143 | 7.5 | Mar 29 | A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba… Affected: before 8.7.0 |
| CVE-2018-7083 | 7.5 | May 10 | If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed Affected: before 8.4.0.1 |
| CVE-2021-37732 | 7.2 | Oct 12 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x:… Affected: before 8.7.1.3 |
| CVE-2021-37730 | 7.2 | Oct 12 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x:… Affected: 8.7.1.3 and later |
| CVE-2021-37727 | 7.2 | Oct 12 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and… Affected: 8.7.1.3 and later |
| CVE-2021-37724 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16 Affected: before 8.7.1.3 |
| CVE-2021-37723 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16 Affected: before 8.7.1.3 |
| CVE-2021-37722 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: All versions, or not specified |
| CVE-2021-37721 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: All versions, or not specified |
| CVE-2021-37720 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: All versions, or not specified |
| CVE-2021-37718 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6;… Affected: All versions, or not specified |
| CVE-2021-37717 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6;… Affected: All versions, or not specified |
| CVE-2021-25146 | 7.2 | Mar 30 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: 8.7.0 before 8.7.1.3 |
| CVE-2020-24635 | 7.2 | Mar 29 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below;… Affected: 8.7.0 before 8.7.1.3 |
| CVE-2018-7082 | 7.2 | May 10 | A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system Affected: before 8.4.0.1 |
| CVE-2019-5317 | 6.8 | Mar 29 | A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba… Affected: before 8.7.0 |
| CVE-2022-37894 | 6.5 | Oct 7 | An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10 Affected: All versions, or not specified |
| CVE-2021-37734 | 6.5 | Oct 12 | A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.19 and… Affected: 8.7.1.3 and later |
| CVE-2021-37729 | 6.5 | Sep 7 | A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3,… Affected: before 8.7.1.3 |
| CVE-2021-37728 | 6.5 | Sep 7 | A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13 Affected: through 8.7.1.3 |
| CVE-2019-5318 | 6.5 | Sep 7 | A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to… Affected: All versions, or not specified |
| CVE-2020-26140 | 6.5 | May 11 | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H Affected: All versions, or not specified |
| CVE-2021-25159 | 6.5 | Mar 30 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 8.7.0 before 8.7.1.3 |
| CVE-2021-25155 | 6.5 | Mar 30 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 8.7.0 before 8.7.1.3 |
| CVE-2021-25145 | 6.5 | Mar 30 | A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18… Affected: 8.7.0 before 8.7.1.3 |
| CVE-2021-37731 | 6.2 | Sep 7 | A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1,… Affected: before 8.7.1.3 |
| CVE-2022-37896 | 6.1 | Oct 7 | A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a… Affected: All versions, or not specified |
| CVE-2021-25161 | 6.1 | Mar 30 | A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 8.7.0 before 8.7.1.3 |