Critical SSA-917476 6 CVEs

SSA-917476: Multiple Vulnerabilities in SCALANCE W1750D

Published Nov 9, 2021 · Updated Oct 11, 2022 · Revision 2

Vendor: Siemens Product: SCALANCE W1750D

Summary

The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to execute code on the affected device(s), read arbitrary files, or create a denial-of-service condition.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 6

Unscored —

CVE-2021-37726

A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7…

Oct 12, 2021
Unscored —

CVE-2021-37727

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4…

Oct 12, 2021
Unscored —

CVE-2021-37730

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant …

Oct 12, 2021
Unscored —

CVE-2021-37732

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant …

Oct 12, 2021
Unscored —

CVE-2021-37734

A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4…

Oct 12, 2021
Unscored —

CVE-2021-37735

A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 an…

Oct 12, 2021

Revision history

2022-10-11 #2
Updated the affected product table with SCALANCE W1750D version V8.7.1.9
2021-11-09 #1
Publication Date

References

SSA-917476: Multiple Vulnerabilities in SCALANCE W1750D - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
SSA-917476: Multiple Vulnerabilities in SCALANCE W1750D - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-917476.txt