CVE-2023-39267

🗓️ 29 Aug 2023 19:28:55Reported by hpeType

An authenticated RCE vulnerability in ArubaOS-Switch CLI leading to DoS condition

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-39267	30 Aug 202300:17	–	circl
CNNVD	Aruba Networks ArubaOS 安全漏洞	29 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-39267 Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface	29 Aug 202319:28	–	cvelist
EUVD	EUVD-2023-42999	3 Oct 202520:07	–	euvd
NVD	CVE-2023-39267	29 Aug 202320:15	–	nvd
Prion	Remote code execution	29 Aug 202320:15	–	prion
Positive Technologies	PT-2023-26857 · Aruba · Arubaos-Switch	29 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-39267	23 May 202504:40	–	redhatcve
Vulnrichment	CVE-2023-39267 Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface	29 Aug 202319:28	–	vulnrichment

NVD

Node

hpe arubaos-switchRange<a.15.16.0026

hpe arubaos-switchRange16.01.0000–16.04.0027

hpe arubaos-switchRange16.05.0000–16.08.0027

hpe arubaos-switchRange16.10.0001–16.10.0024

hpe arubaos-switchRange16.11.0001–16.11.0013

AND

arubanetworks aruba_2530Match-

arubanetworks aruba_2530yaMatch-

arubanetworks aruba_2530ybMatch-

arubanetworks aruba_2540Match-

arubanetworks aruba_2920Match-

arubanetworks aruba_2930fMatch-

arubanetworks aruba_2930mMatch-

arubanetworks aruba_3810mMatch-

arubanetworks aruba_5406r_zl2Match-

arubanetworks aruba_5412r_zl2Match-

[
  {
    "defaultStatus": "affected",
    "product": "ArubaOS-Switch",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0012 and below."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC.16.10.0025 and below."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.10.xxxx: WB.16.10.23 and below."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.09.xxxx: All versions."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0026 and below."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.07.xxxx: All versions."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.06.xxxx: All versions."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.05.xxxx: All versions."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0026 and below."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.03.xxxx: All versions."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.02.xxxx: All versions."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.01.xxxx: All versions."
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 15.xx.xxxx: 15.16.0025 and below."
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt

21 Nov 2024 08:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.5 - 6.6

EPSS0.00397

SSVC