CVE-2021-37726

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-10-12 · updated 2026-06-17
Weakness: CWE-120

Description

A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

Affected products

Arubanetworks Aruba Instant: from 8.7.0.0 before 8.7.1.3 — fixed in 8.7.1.3
Siemens Scalance W1750D Firmware: before 8.7.1.3 — fixed in 8.7.1.3

How to fix

Upgrade to a fixed version: Arubanetworks Aruba Instant 8.7.1.3; Siemens Scalance W1750D Firmware 8.7.1.3. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt
https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt

Get alerted when CVE-2021-37726 or the next vulnerability affects your stack