What’s Vulnerable › Vulnerabilities
CVE-2021-41004
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-04-12 · updated 2026-06-17
Description
A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.
Affected products
- HPE Aruba Instant On 1930 24G 4Sfp/Sfp+ Firmware: before 1.0.7.0 — fixed in 1.0.7.0
- HPE Aruba Instant On 1930 24G Class4 Poe 4Sfp/Sfp+ 195W Firmware: before 1.0.7.0 — fixed in 1.0.7.0
- HPE Aruba Instant On 1930 24G Class4 Poe 4Sfp/Sfp+ 370W Firmware: before 1.0.7.0 — fixed in 1.0.7.0
- HPE Aruba Instant On 1930 48G 4Sfp/Sfp+ Firmware: before 1.0.7.0 — fixed in 1.0.7.0
- HPE Aruba Instant On 1930 48G Class4 Poe 4Sfp/Sfp+ 370W Firmware: before 1.0.7.0 — fixed in 1.0.7.0
- HPE Aruba Instant On 1930 8G 2Sfp Firmware: before 1.0.7.0 — fixed in 1.0.7.0
- HPE Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W Firmware: before 1.0.7.0 — fixed in 1.0.7.0
How to fix
Upgrade to a fixed version: HPE Aruba Instant On 1930 24G 4Sfp/Sfp+ Firmware 1.0.7.0; HPE Aruba Instant On 1930 24G Class4 Poe 4Sfp/Sfp+ 195W Firmware 1.0.7.0; HPE Aruba Instant On 1930 24G Class4 Poe 4Sfp/Sfp+ 370W Firmware 1.0.7.0; HPE Aruba Instant On 1930 48G 4Sfp/Sfp+ Firmware 1.0.7.0; HPE Aruba Instant On 1930 48G Class4 Poe 4Sfp/Sfp+ 370W Firmware 1.0.7.0; HPE Aruba Instant On 1930 8G 2Sfp Firmware 1.0.7.0; HPE Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W Firmware 1.0.7.0. Check the vendor advisory for mitigations.
References
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us
Get alerted when CVE-2021-41004 or the next vulnerability affects your stack