CVE-2016-2031 Other in n/a
Insufficient input validation in Aruba Instant allows attackers to bypass security, access sensitive data, and execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-2031?
CVE-2016-2031 is a critical vulnerability in Arubanetworks Arubaos, published on 31 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.
Weakness: CWE-20
Which versions are affected by CVE-2016-2031?
It affects 4 products.
Products include Arubanetworks Airwave, Arubanetworks Aruba Instant, Arubanetworks Arubaos, Siemens Scalance W1750d Firmware.
How do I fix CVE-2016-2031?
No fix has been published for CVE-2016-2031 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-2031 being exploited?
There is no known exploitation of CVE-2016-2031 in the wild and no public exploit code.
Other vulnerabilities in Arubanetworks Arubaos
- CVE-2014-8368 Privilege escalation in n/a
- CVE-2021-25166 Command injection in Aruba AirWave Management Platform
- CVE-2021-25167 Command injection in Aruba AirWave Management Platform
- CVE-2021-25151 Deserialization in Aruba AirWave Management Platform
- CVE-2021-26960 Cross-site request forgery in Aruba AirWave Management Platform
Sources
Also known as GHSA-62m2-jrj9-gqh5.