VDB

CVE-2021-37730

CVE-2021-37730 PUBLISHED

Reported by hpe · Published October 12, 2021

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

Affected products

VendorProductVersions
n/aHPE Aruba Instant (IAP)Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below, Aruba Instant 6.5.x.x: 6.5.4.20 and below, Aruba Instant 8.5.x.x: 8.5.0.12 and below
n/aHPE Aruba Instant (IAP)6.4.x.x, 6.5.x.x, 8.5.x.x

Timeline

  • Oct 6, 2021 CVE Published
  • Oct 13, 2021 EPSS Score (30 in total, the first dated here)
  • Jun 1, 2026 Security Advisory
  • Jun 17, 2026 CVE Updated
  • Jul 26, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2021-37730
vulnetix vdb fixes CVE-2021-37730

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-37730/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • x_refsource_MISC
  • x_refsource_CONFIRM
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›