VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 22, 2021· Updated Jun 17, 2026

CVE-2021-29148

CVE-2021-29148

Description

A local cross-site scripting (XSS) vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.

Affected products

4
  • Arubanetworks/Aos Cx Firmware
    cpe:2.3:o:arubanetworks:aos-cx_firmware:*:*:*:*:*:*:*:*
    Range: >=10.04.000,<10.04.3070
  • Aruba/CX 6200F Switch Seriesdescription
  • Arubanetworks/CX 6200F Switch Seriesllm-create
    Range: 10.04.xxxx - <10.04.3070, 10.05.xxxx - <10.05.0070, 10.06.xxxx - <10.06.0110, 10.07.xxxx - <10.07.0001
  • Arubanetworks/AOS-CXllm-create
    Range: 10.04.xxxx - <10.04.3070, 10.05.xxxx - <10.05.0070, 10.06.xxxx - <10.06.0110, 10.07.xxxx - <10.07.0001

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.