Lucene search

[email protected]NVD:CVE-2023-39268

HistoryAug 29, 2023 - 8:15 p.m.

CVE-2023-39268

2023-08-2920:15:09

CWE-787

[email protected]

web.nvd.nist.gov

arubaos-switch

memory corruption

remote code execution

unauthenticated

privilege escalation

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

73.0%

JSON

A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Affected configurations

Nvd

Node

hpearubaos-switchRange<a.15.16.0026

hpearubaos-switchRange16.01.0000–16.04.0027

hpearubaos-switchRange16.05.0000–16.08.0027

hpearubaos-switchRange16.10.0001–16.10.0024

hpearubaos-switchRange16.11.0001–16.11.0013

AND

arubanetworksaruba_2530Match-

arubanetworksaruba_2530yaMatch-

arubanetworksaruba_2530ybMatch-

arubanetworksaruba_2540Match-

arubanetworksaruba_2920Match-

arubanetworksaruba_2930fMatch-

arubanetworksaruba_2930mMatch-

arubanetworksaruba_3810mMatch-

arubanetworksaruba_5406r_zl2Match-

arubanetworksaruba_5412r_zl2Match-

VendorProductVersionCPE
hpearubaos-switch*cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:*
arubanetworksaruba_2530-cpe:2.3:h:arubanetworks:aruba_2530:-:*:*:*:*:*:*:*
arubanetworksaruba_2530ya-cpe:2.3:h:arubanetworks:aruba_2530ya:-:*:*:*:*:*:*:*
arubanetworksaruba_2530yb-cpe:2.3:h:arubanetworks:aruba_2530yb:-:*:*:*:*:*:*:*
arubanetworksaruba_2540-cpe:2.3:h:arubanetworks:aruba_2540:-:*:*:*:*:*:*:*
arubanetworksaruba_2920-cpe:2.3:h:arubanetworks:aruba_2920:-:*:*:*:*:*:*:*
arubanetworksaruba_2930f-cpe:2.3:h:arubanetworks:aruba_2930f:-:*:*:*:*:*:*:*
arubanetworksaruba_2930m-cpe:2.3:h:arubanetworks:aruba_2930m:-:*:*:*:*:*:*:*
arubanetworksaruba_3810m-cpe:2.3:h:arubanetworks:aruba_3810m:-:*:*:*:*:*:*:*
arubanetworksaruba_5406r_zl2-cpe:2.3:h:arubanetworks:aruba_5406r_zl2:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hpe	arubaos-switch	*	cpe:2.3:o:hpe:arubaos-switch::::::::
arubanetworks	aruba_2530	-	cpe:2.3:h:arubanetworks:aruba_2530:-:::::::*
arubanetworks	aruba_2530ya	-	cpe:2.3:h:arubanetworks:aruba_2530ya:-:::::::*
arubanetworks	aruba_2530yb	-	cpe:2.3:h:arubanetworks:aruba_2530yb:-:::::::*
arubanetworks	aruba_2540	-	cpe:2.3:h:arubanetworks:aruba_2540:-:::::::*
arubanetworks	aruba_2920	-	cpe:2.3:h:arubanetworks:aruba_2920:-:::::::*
arubanetworks	aruba_2930f	-	cpe:2.3:h:arubanetworks:aruba_2930f:-:::::::*
arubanetworks	aruba_2930m	-	cpe:2.3:h:arubanetworks:aruba_2930m:-:::::::*
arubanetworks	aruba_3810m	-	cpe:2.3:h:arubanetworks:aruba_3810m:-:::::::*
arubanetworks	aruba_5406r_zl2	-	cpe:2.3:h:arubanetworks:aruba_5406r_zl2:-:::::::*

Rows per page:

1-10 of 111

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

73.0%

JSON

Related for NVD:CVE-2023-39268

cve1 prion1 vulnrichment1 cvelist1