CVE-2022-23680

🗓️ 06 Sep 2022 18:15:10Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 16 Views

AOS-CX lacks Anti-CSRF protections, allowing command execution by an attacker

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-23680	6 Sep 202218:15	–	attackerkb
CNNVD	Aruba AOS-CX 跨站请求伪造漏洞	30 Aug 202200:00	–	cnnvd
CVE	CVE-2022-23680	6 Sep 202217:18	–	cve
Cvelist	CVE-2022-23680	6 Sep 202217:18	–	cvelist
EUVD	EUVD-2022-28619	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Aruba AOS-CX switches	31 Aug 202200:00	–	ncsc
OSV	CVE-2022-23680	6 Sep 202218:15	–	osv
Prion	Cross site request forgery (csrf)	6 Sep 202218:15	–	prion
Positive Technologies	PT-2022-16190 · Aruba · Arubaos-Cx Switches	6 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-23680	9 Jan 202610:54	–	redhatcve

NVD

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_10000Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_8325Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_8320Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_9300Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_8360Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_6400Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_6300Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_6200fMatch-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_6100Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_6000Match-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_4100iMatch-

Node

arubanetworks aos-cxRange10.06.0000–10.06.0210

OR

arubanetworks aos-cxRange10.08.0000–10.08.1070

OR

arubanetworks aos-cxRange10.09.0000–10.09.1030

OR

arubanetworks aos-cxRange10.10.0000–10.10.1000

AND

arubanetworks cx_8400Match-

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt

21 Nov 2024 06:49Current

CVSS 3.18.8

EPSS0.00141

aos-cx anti-csrf command execution security vulnerability arubaos-cx switches upgrades