How severe is CVE-2019-5322?

CVE-2019-5322 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2019-5322 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (63rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2019-5322?

CVE-2019-5322 primarily affects Arubanetworks 5400r Firmware. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2019-5322?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2019-5322 published?

CVE-2019-5322 was published on 2020-02-13 and last updated on 2026-06-17.

CVE-2019-5322

CVE-2019-5322 is a high-severity vulnerability in Arubanetworks 5400r Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v2: 5.0
EPSS exploit prediction: 1% (63rd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Arubanetworks 5400r Firmware
Published: 2020-02-13
Last modified: 2026-06-17

Description

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.

Frequently asked questions

What is CVE-2019-5322?: A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.
How severe is CVE-2019-5322?: CVE-2019-5322 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2019-5322 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (63rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2019-5322?: CVE-2019-5322 primarily affects Arubanetworks 5400r Firmware. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2019-5322?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2019-5322 published?: CVE-2019-5322 was published on 2020-02-13 and last updated on 2026-06-17.

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt

Affected products (7)

cpe:2.3:o:arubanetworks:5400r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:3810_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2920_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2930_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2530_with_gigt_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2530_10\/100_port_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:2540_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Arubanetworks 5400r Firmware

CVE-2019-5321 — High (CVSS 8.8): Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before…
CVE-2019-5320 — Medium (CVSS 6.1): Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before…

All CVEs affecting Arubanetworks 5400r Firmware →