Lucene search

HpeCVE-2022-23689

HistorySep 06, 2022 - 6:15 p.m.

CVE-2022-23689

2022-09-0618:15:11

hpe

web.nvd.nist.gov

cve-2022-23689

aos-cx

lldp service

security vulnerabilities

arubaos-cx switches

nvd

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

19.8%

JSON

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.

Affected configurations

Nvd

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_10000Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_8325Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_8320Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_9300Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_8360Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_6400Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_6300Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_6200fMatch-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_6100Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_6000Match-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_4100iMatch-

Node

arubanetworksaos-cxRange10.06.0000–10.06.0200

arubanetworksaos-cxRange10.08.0000–10.08.1060

arubanetworksaos-cxRange10.09.0000–10.09.1020

arubanetworksaos-cxRange10.10.0000–10.10.0002

AND

arubanetworkscx_8400Match-

VendorProductVersionCPE
arubanetworksaos-cx*cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
arubanetworkscx_10000-cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*
arubanetworkscx_8325-cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*
arubanetworkscx_8320-cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*
arubanetworkscx_9300-cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*
arubanetworkscx_8360-cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*
arubanetworkscx_6400-cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*
arubanetworkscx_6300-cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*
arubanetworkscx_6200f-cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*
arubanetworkscx_6100-cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arubanetworks	aos-cx	*	cpe:2.3:o:arubanetworks:aos-cx::::::::
arubanetworks	cx_10000	-	cpe:2.3:h:arubanetworks:cx_10000:-:::::::*
arubanetworks	cx_8325	-	cpe:2.3:h:arubanetworks:cx_8325:-:::::::*
arubanetworks	cx_8320	-	cpe:2.3:h:arubanetworks:cx_8320:-:::::::*
arubanetworks	cx_9300	-	cpe:2.3:h:arubanetworks:cx_9300:-:::::::*
arubanetworks	cx_8360	-	cpe:2.3:h:arubanetworks:cx_8360:-:::::::*
arubanetworks	cx_6400	-	cpe:2.3:h:arubanetworks:cx_6400:-:::::::*
arubanetworks	cx_6300	-	cpe:2.3:h:arubanetworks:cx_6300:-:::::::*
arubanetworks	cx_6200f	-	cpe:2.3:h:arubanetworks:cx_6200f:-:::::::*
arubanetworks	cx_6100	-	cpe:2.3:h:arubanetworks:cx_6100:-:::::::*

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "product": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below."
      }
    ]
  }
]

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt

Social References

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

19.8%

JSON

Related for CVE-2022-23689