Lucene search
HistoryAug 29, 2023 - 8:15 p.m.
CVE-2023-39267
authenticated
remote code execution
denial-of-service
arubaos-switch
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
48.2%
An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.
Affected configurations
Node
hpearubaos-switchRange<a.15.16.0026
ORhpearubaos-switchRange16.01.0000–16.04.0027
ORhpearubaos-switchRange16.05.0000–16.08.0027
ORhpearubaos-switchRange16.10.0001–16.10.0024
ORhpearubaos-switchRange16.11.0001–16.11.0013
arubanetworksaruba_2530Match-
ORarubanetworksaruba_2530yaMatch-
ORarubanetworksaruba_2530ybMatch-
ORarubanetworksaruba_2540Match-
ORarubanetworksaruba_2920Match-
ORarubanetworksaruba_2930fMatch-
ORarubanetworksaruba_2930mMatch-
ORarubanetworksaruba_3810mMatch-
ORarubanetworksaruba_5406r_zl2Match-
ORarubanetworksaruba_5412r_zl2Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hpe | arubaos-switch | * | cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:* |
| arubanetworks | aruba_2530 | - | cpe:2.3:h:arubanetworks:aruba_2530:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_2530ya | - | cpe:2.3:h:arubanetworks:aruba_2530ya:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_2530yb | - | cpe:2.3:h:arubanetworks:aruba_2530yb:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_2540 | - | cpe:2.3:h:arubanetworks:aruba_2540:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_2920 | - | cpe:2.3:h:arubanetworks:aruba_2920:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_2930f | - | cpe:2.3:h:arubanetworks:aruba_2930f:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_2930m | - | cpe:2.3:h:arubanetworks:aruba_2930m:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_3810m | - | cpe:2.3:h:arubanetworks:aruba_3810m:-:*:*:*:*:*:*:* |
| arubanetworks | aruba_5406r_zl2 | - | cpe:2.3:h:arubanetworks:aruba_5406r_zl2:-:*:*:*:*:*:*:* |
Related
prion
prion
Remote code execution
2023-08-29 20:15:00
vulnrichment
vulnrichment
cvelist
cvelist
cve
cve
CVE-2023-39267
2023-08-29 20:15:09
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
48.2%
Related for NVD:CVE-2023-39267