CVE-2023-45625

🗓️ 14 Nov 2023 22:57:42Reported by hpeType

Multiple authenticated command injection vulnerabilities in command line interface, allows arbitrary command execution as privileged user

Reporter	Title	Published	Views	Family All 11
Tenable Nessus	ArubaOS 10.3.x < 10.4.0.3 / 10.5.x.x < 10.5.0.1 Multiple Vulnerabilities (ARUBA-PSA-2023-017)	17 Nov 202300:00	–	nessus
Tenable Nessus	Siemens Scalance W1750D Improper Neutralization of Special Elements used in a Command (CVE-2023-45625)	13 Apr 202400:00	–	nessus
CNNVD	Aruba Networks ArubaOS and InstantOS Command Injection Vulnerability	14 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-45625	14 Nov 202322:57	–	cvelist
EUVD	EUVD-2023-49917	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in HPE Aruba Access Points	15 Nov 202300:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products	13 Feb 202400:00	–	ncsc
NVD	CVE-2023-45625	14 Nov 202323:15	–	nvd
Prion	Command injection	14 Nov 202323:15	–	prion
Positive Technologies	PT-2023-29605 · Hewlett Packard +1 · Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; +2	14 Nov 202300:00	–	ptsecurity

NVD

Node

arubanetworks arubaosRange10.3.0.0–10.4.0.3

arubanetworks arubaosMatch10.5.0.0

hp instantosRange6.4.0.0–8.6.0.23

hp instantosRange8.10.0.0–8.10.0.9

hp instantosRange8.11.0.0–8.11.2.0

[
  {
    "defaultStatus": "affected",
    "product": "Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; ",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "ArubaOS 10.5.x.x: 10.5.0.0 and below"
      },
      {
        "status": "affected",
        "version": "ArubaOS 10.4.x.x: 10.4.0.2 and below"
      },
      {
        "status": "affected",
        "version": "InstantOS 8.11.x.x: 8.11.1.2 and below"
      },
      {
        "status": "affected",
        "version": "InstantOS 8.10.x.x: 8.10.0.8 and below"
      },
      {
        "status": "affected",
        "version": "InstantOS 8.6.x.x: 8.6.0.22 and below"
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt

21 Nov 2024 08:27Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.2

EPSS0.00073

CWE-77