CVE-2019-5321

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-08-26 · updated 2026-06-17

Description

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.

Affected products

Arubanetworks 2530 Firmware: from 16.08.0 before 16.08.0009; from 16.09.0 before 16.09.0007; from 16.10.0 before 16.10.0003 — fixed in 16.08.0009, 16.09.0007, 16.10.0003
Arubanetworks 2540 Firmware: from 16.08.0 before 16.08.0009; from 16.09.0 before 16.09.0007; from 16.10.0 before 16.10.0003 — fixed in 16.08.0009, 16.09.0007, 16.10.0003
Arubanetworks 2920 Firmware: from 16.08.0 before 16.08.0009; from 16.09.0 before 16.09.0007; from 16.10.0 before 16.10.0003 — fixed in 16.08.0009, 16.09.0007, 16.10.0003
Arubanetworks 2930 Firmware: from 16.08.0 before 16.08.0009; from 16.09.0 before 16.09.0007; from 16.10.0 before 16.10.0003 — fixed in 16.08.0009, 16.09.0007, 16.10.0003
Arubanetworks 3810 Firmware: from 16.08.0 before 16.08.0009; from 16.09.0 before 16.09.0007; from 16.10.0 before 16.10.0003 — fixed in 16.08.0009, 16.09.0007, 16.10.0003
Arubanetworks 5400R Firmware: from 16.08.0 before 16.08.0009; from 16.09.0 before 16.09.0007; from 16.10.0 before 16.10.0003 — fixed in 16.08.0009, 16.09.0007, 16.10.0003

How to fix

Upgrade to a fixed version: Arubanetworks 2530 Firmware 16.08.0009, 16.09.0007, 16.10.0003; Arubanetworks 2540 Firmware 16.08.0009, 16.09.0007, 16.10.0003; Arubanetworks 2920 Firmware 16.08.0009, 16.09.0007, 16.10.0003; Arubanetworks 2930 Firmware 16.08.0009, 16.09.0007, 16.10.0003; Arubanetworks 3810 Firmware 16.08.0009, 16.09.0007, 16.10.0003; Arubanetworks 5400R Firmware 16.08.0009, 16.09.0007, 16.10.0003. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-5321 or the next vulnerability affects your stack