Lucene search

K
cvelistHpeCVELIST:CVE-2022-23686
HistorySep 06, 2022 - 5:18 p.m.

CVE-2022-23686

2022-09-0617:18:54
hpe
www.cve.org
lldp service
aos-cx
arubaos-cx switches
vulnerabilities
security
upgrades

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.

CNA Affected

[
  {
    "product": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below."
      }
    ]
  }
]

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

Related for CVELIST:CVE-2022-23686