CVE-2019-5322

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-5322
A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:5400r:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:3810:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:2920:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:2930:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:2530_with_gigt_port:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:arubanetworks:2530_10\/100_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2530_10\/100_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2530_10\/100_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:2530_10\/100_port:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:2540:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2020-02-13 00:15

Updated : 2020-08-24 17:37

NVD link : CVE-2019-5322

Mitre link : CVE-2019-5322

CVE.ORG link : CVE-2019-5322

JSON object : View

Products Affected

arubanetworks

  • 2540
  • 5400r_firmware
  • 5400r
  • 3810_firmware
  • 2920
  • 2920_firmware
  • 2930
  • 2530_with_gigt_port
  • 3810
  • 2930_firmware
  • 2530_10\/100_port_firmware
  • 2530_with_gigt_port_firmware
  • 2530_10\/100_port
  • 2540_firmware
CWE
NVD-CWE-noinfo