Is CVE-2021-34618 actively exploited?

No active exploitation of CVE-2021-34618 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-34618 be exploited remotely?

Partially. CVE-2021-34618 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2021-34618?

CVE-2021-34618 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2021-34618

MEDIUM

CVE-2021-34618

NVD-CWE-noinfoPublished: July 19, 2021· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.4.x: All versions; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

NVD Source

Technical Analysis

CVE-2021-34618 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.5.