CVE-2022-23677

2022-05-1018:15:28

hpe

www.cve.org

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.

CNA Affected

[
  {
    "product": "ArubaOS-Switch Devices",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ArubaOS-Switch 15.xx.xxxx: All versions"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.01.xxxx: All versions"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.03.xxxx: All versions"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.04.xxxx: All versions"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.05.xxxx: All versions"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.06.xxxx: All versions"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.07.xxxx: All versions"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below"
      },
      {
        "status": "affected",
        "version": "ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below."
      }
    ]
  }
]