Critical SSA-723417 21 CVEs

SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D

Published May 11, 2021 · Updated Oct 12, 2021 · Revision 3

Vendor: Siemens Product: SCALANCE W1750D

Summary

The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or trigger buffer overflows.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 21

Unscored —

CVE-2019-5317

A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version…

Mar 29, 2021
Unscored —

CVE-2019-5319

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): …

Mar 30, 2021
Unscored —

CVE-2020-24635

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

Mar 29, 2021
Unscored —

CVE-2020-24636

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

Mar 29, 2021
Unscored —

CVE-2021-25143

A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in vers…

Mar 29, 2021
Unscored —

CVE-2021-25144

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): …

Mar 29, 2021
Unscored —

CVE-2021-25145

A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) p…

Mar 29, 2021
Unscored —

CVE-2021-25146

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

Mar 30, 2021
Unscored —

CVE-2021-25148

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

Mar 29, 2021
Unscored —

CVE-2021-25149

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): …

Mar 29, 2021
Unscored —

CVE-2021-25150

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

Mar 30, 2021
Unscored —

CVE-2021-25155 Public exploit EPSS 12%

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

Mar 30, 2021
Unscored —

CVE-2021-25156 Public exploit EPSS 40%

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v…

Mar 30, 2021
Unscored —

CVE-2021-25157 Public exploit EPSS 10%

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(…

Mar 30, 2021
Unscored —

CVE-2021-25158 Public exploit EPSS 30%

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(…

Mar 30, 2021
Unscored —

CVE-2021-25159 Public exploit EPSS 13%

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

Mar 30, 2021
Unscored —

CVE-2021-25160 Public exploit

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

Mar 30, 2021
Unscored —

CVE-2021-25161 Public exploit Scanner template EPSS 16%

A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v…

Mar 30, 2021
Unscored —

CVE-2021-25162 Public exploit EPSS 26%

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

Mar 30, 2021
Unscored —

CVE-2021-34617

A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v…

Jul 19, 2021
Unscored —

CVE-2021-34618

A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in vers…

Jul 19, 2021

Revision history

2021-10-12 #3
Added solution for SCALANCE W1750D
2021-08-10 #2
Added CVE-2021-34617 and CVE-2021-34618 from updated Aruba Advisory
2021-05-11 #1
Publication Date

References

SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf
SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-723417.txt