CVE-2021-29149

MEDIUM

6.2

CVSS Score

Published: July 22, 2021 at 01:42 PM UTC

Updated: June 17, 2026 at 03:47 AM UTC

9 products affected across 2 vendorsAos Cx FirmwareCX 8320CX 8325

Using Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series by N/A?

Get instant alerts when new vulnerabilities affect Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.2

Exploit prediction

EPSS 0.2%

Description

A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Aos Cx Firmware · Aruba Networks

95%

10.04.000 ≤ v < 10.04.307010.05.0000 ≤ v < 10.05.007010.06.0000 ≤ v ≤ 10.06.011010.07.0000 ≤ v ≤ 10.07.0001

Affected range stops below 10.04.3070, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.05.0070, so it looks safe — our inference, not a vendor statement

arubanetworks-cx-6200f (environment) · arubanetworks-cx-6300 (environment) · arubanetworks-cx-6400 (environment) · arubanetworks-cx-8320 (environment) · arubanetworks-cx-8325 (environment) · arubanetworks-cx-8360 (environment) · arubanetworks-cx-8400 (environment)

Arubaos Cx · HPE

60%

v < 10.04.3070

Affected range stops below 10.04.3070, so it looks safe — our inference, not a vendor statement

CX 6200F · Aruba Networksdevice

80%

All versions

CX 6300 · Aruba Networksdevice

80%

All versions

CX 6400 · Aruba Networksdevice

80%