High severity7.2NVD Advisory· Published Sep 7, 2021· Updated Jun 17, 2026
CVE-2021-37718
CVE-2021-37718
Description
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.
Affected products
6cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=8.3.0.0,<8.3.0.16
- (no CPE)range: <8.6.0.4-2.2.0.6, <8.7.1.4, <8.6.0.7, <8.5.0.12, <8.3.0.16
- cpe:2.3:o:siemens:scalance_w1750d_firmware:-:*:*:*:*:*:*:*
- Aruba/Aruba SD-WAN Software and Gatewaysdescription
- Range: <8.6.0.4-2.2.0.6, <8.7.1.4, <8.6.0.7, <8.5.0.12, <8.3.0.16
Patches
Vulnerability mechanics
References
2- cert-portal.siemens.com/productcert/pdf/ssa-280624.pdfnvdMitigationThird Party Advisory
- www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txtnvdVendor Advisory
News mentions
0No linked articles in our index yet.