2 lines
9.2 KiB
JSON
2 lines
9.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"Aruba Intelligent Edge Switch 5400 3810 2920 2930 2530 with GigT port 2530 10/100 port or 2540","vendor":"n/a","versions":[{"status":"affected","version":"16.08.* before 16.08.0009 16.09.* before 16.09.0007 16.10.* before 16.10.0003"}]}],"source":"security-alert@hpe.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2341B367-40AF-4C35-9F42-A70DC7EF7327","versionEndExcluding":"16.08.0009","versionStartIncluding":"16.08.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"366D01BF-B225-46CE-8D65-CD5D465927D7","versionEndExcluding":"16.09.0007","versionStartIncluding":"16.09.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"DCEEF1C4-2DB6-442E-A0FB-142164AA468B","versionEndExcluding":"16.10.0003","versionStartIncluding":"16.10.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arubanetworks:5400r:-:*:*:*:*:*:*:*","matchCriteriaId":"0A4D2FBD-6C59-4335-91A4-E207A79437EE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1F665194-5588-4C44-872A-7F8FBFC4CC13","versionEndExcluding":"16.08.0009","versionStartIncluding":"16.08.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1AA1B366-6CBF-4E15-80F1-49C5FEB57AA9","versionEndExcluding":"16.09.0007","versionStartIncluding":"16.09.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"59F72D27-CA2E-4552-B98D-3C38A80FCECB","versionEndExcluding":"16.10.0003","versionStartIncluding":"16.10.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arubanetworks:3810:-:*:*:*:*:*:*:*","matchCriteriaId":"05464EC4-B17E-4978-A3A2-D15E6AEFEE8D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6FE44B66-0B01-469E-B1CF-9B404EE94BFE","versionEndExcluding":"16.08.0009","versionStartIncluding":"16.08.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"12A7AD83-407F-4C6B-82C6-F3EEEB3F6C5D","versionEndExcluding":"16.09.0007","versionStartIncluding":"16.09.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"12C3064B-E09E-402C-81D9-B0DE4A0DBCAC","versionEndExcluding":"16.10.0003","versionStartIncluding":"16.10.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arubanetworks:2920:-:*:*:*:*:*:*:*","matchCriteriaId":"49A558E1-58CF-44DE-91D6-CCD2ABE05542","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5C9C1C8A-31D3-40D9-BB14-923F7EC97C10","versionEndExcluding":"16.08.0009","versionStartIncluding":"16.08.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F0F7BA54-B828-40D5-9A4D-A01554AC7422","versionEndExcluding":"16.09.0007","versionStartIncluding":"16.09.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3C38896E-3369-48FF-8412-C0DED8149D54","versionEndExcluding":"16.10.0003","versionStartIncluding":"16.10.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arubanetworks:2930:-:*:*:*:*:*:*:*","matchCriteriaId":"82CDF5BF-DE3C-4F5A-9766-BFFE20D4B5AF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"008556C5-C893-4425-B8AC-F9B2F6B590F0","versionEndExcluding":"16.08.0009","versionStartIncluding":"16.08.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"BEFCCBCA-332D-4276-9FE8-39B7A43FDBC4","versionEndExcluding":"16.09.0007","versionStartIncluding":"16.09.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"44823B98-B516-4DD1-9756-75492D13DB41","versionEndExcluding":"16.10.0003","versionStartIncluding":"16.10.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arubanetworks:2530_with_gigt_port:-:*:*:*:*:*:*:*","matchCriteriaId":"0FAF00DD-9FBE-42AB-8DCA-AE6788A6D107","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arubanetworks:2530_10\\/100_port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A73043-AC6B-4B49-A146-A018F8B473E6","versionEndExcluding":"16.08.0009","versionStartIncluding":"16.08.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2530_10\\/100_port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C175A0DD-270B-4BE0-A0DF-F96678734E62","versionEndExcluding":"16.09.0007","versionStartIncluding":"16.09.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2530_10\\/100_port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D45E7E69-6876-495C-8D25-86EBD02C2226","versionEndExcluding":"16.10.0003","versionStartIncluding":"16.10.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arubanetworks:2530_10\\/100_port:-:*:*:*:*:*:*:*","matchCriteriaId":"AE50F97D-4D29-41DE-8044-7EA0C40A8AD7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0898F407-54CF-46F8-B7B0-F2457361C5CA","versionEndExcluding":"16.08.0009","versionStartIncluding":"16.08.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3AAC32CC-E459-43E7-8932-113730FCBB70","versionEndExcluding":"16.09.0007","versionStartIncluding":"16.09.0","vulnerable":true},{"criteria":"cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FBB7E2A8-86F3-4AF2-913A-42958C942BFF","versionEndExcluding":"16.10.0003","versionStartIncluding":"16.10.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arubanetworks:2540:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFFC632-14E9-49DC-AC70-915549150CAF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información remotamente explotable está presente en Aruba Intelligent Edge Switch modelos 5400, 3810, 2920, 2930, 2530 con puerto GigT, puerto 2530 10/100 o 2540. La vulnerabilidad afecta a versiones de firmware 16.08.* anteriores a 16.08.0009, 16.09.* anteriores a 16.09.0007 y 16.10.* anteriores a 16.10.0003. La vulnerabilidad permite a un atacante recuperar información confidencial del sistema. Este ataque puede llevarse a cabo sin autenticación del usuario bajo condiciones muy específicas."}],"id":"CVE-2019-5322","lastModified":"2026-06-17T02:37:30.840","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-02-13T00:15:11.150","references":[{"source":"security-alert@hpe.com","tags":["Vendor Advisory"],"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt"}],"sourceIdentifier":"security-alert@hpe.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|