Lucene search
HpeCVELIST:CVE-2022-23683HistorySep 06, 2022 - 5:18 p.m.
CVE-2022-23683
2022-09-0617:18:53
hpe
www.cve.org
5
vulnerabilities
command injection
aos-cx
nae scripts
arubaos-cx
switches
cve-2022-23683
security upgrade
Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
CNA Affected
[
{
"product": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below."
}
]
}
]Related
prion
prion
Command injection
2022-09-06 18:15:00
nvd
nvd
CVE-2022-23683
2022-09-06 18:15:11
cve
cve
CVE-2022-23683
2022-09-06 18:15:11