vulnerability

Aruba AOS-8: CVE-2021-41837: SMM Privilege Escalation Vulnerability

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Feb 1, 2022
Added
Jan 14, 2025
Modified
Jul 2, 2025

Description

Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

Solution

aruba-aos-8-cve-2021-41837
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.