Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2021-09-07 CVE-2021-37717 Command Injection vulnerability in multiple products
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16.
network
low complexity
arubanetworks siemens CWE-77
7.2
2021-09-07 CVE-2021-37718 Command Injection vulnerability in multiple products
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16.
network
low complexity
arubanetworks siemens CWE-77
7.2
2021-09-07 CVE-2021-37719 Command Injection vulnerability in Arubanetworks Arubaos
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25.
network
low complexity
arubanetworks CWE-77
7.2
2021-09-07 CVE-2021-37720 Command Injection vulnerability in multiple products
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25.
network
low complexity
arubanetworks siemens CWE-77
7.2
2021-09-07 CVE-2021-37721 Command Injection vulnerability in multiple products
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25.
network
low complexity
arubanetworks siemens CWE-77
7.2
2021-09-07 CVE-2021-37722 Command Injection vulnerability in multiple products
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25.
network
low complexity
arubanetworks siemens CWE-77
7.2
2021-09-07 CVE-2021-37723 Command Injection vulnerability in multiple products
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16.
network
low complexity
arubanetworks siemens CWE-77
7.2
2021-09-07 CVE-2021-37724 Command Injection vulnerability in multiple products
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16.
network
low complexity
arubanetworks siemens CWE-77
7.2
2021-09-07 CVE-2021-37725 Cross-Site Request Forgery (CSRF) vulnerability in multiple products
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.8.0.1, 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15.
network
low complexity
arubanetworks siemens CWE-352
8.1
2021-09-07 CVE-2021-36717 Path Traversal vulnerability in Synerion Timenet 9.21
Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file.
network
low complexity
synerion CWE-22
7.5