Critical SSA-280624 15 CVEs

SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D

Published Oct 12, 2021 · Updated Oct 11, 2022 · Revision 2

Vendor: Siemens Product: SCALANCE W1750D

Summary

The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution.

Siemens has released updates for the SCALANCE W1750D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 15

Unscored —

CVE-2019-5318

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): …

Sep 7, 2021
Unscored —

CVE-2021-37716

A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Sof…

Sep 7, 2021
Unscored —

CVE-2021-37717

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operatin…

Sep 7, 2021
Unscored —

CVE-2021-37718

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operatin…

Sep 7, 2021
Unscored —

CVE-2021-37719

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operatin…

Sep 7, 2021
Unscored —

CVE-2021-37720

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operatin…

Sep 7, 2021
Unscored —

CVE-2021-37721

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operatin…

Sep 7, 2021
Unscored —

CVE-2021-37722

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operatin…

Sep 7, 2021
Unscored —

CVE-2021-37723

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior …

Sep 7, 2021
Unscored —

CVE-2021-37724

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior …

Sep 7, 2021
Unscored —

CVE-2021-37725

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Op…

Sep 7, 2021
Unscored —

CVE-2021-37728

A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8…

Sep 7, 2021
Unscored —

CVE-2021-37729

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Soft…

Sep 7, 2021
Unscored —

CVE-2021-37731

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softw…

Sep 7, 2021
Unscored —

CVE-2021-37733

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Soft…

Sep 7, 2021

Revision history

2022-10-11 #2
Updated the affected product table with SCALANCE W1750D version V8.7.1.9
2021-10-12 #1
Publication Date

References

SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-280624.txt