Lucene search

K
nvd[email protected]NVD:CVE-2023-45617
HistoryNov 14, 2023 - 11:15 p.m.

CVE-2023-45617

2023-11-1423:15:09
web.nvd.nist.gov
aruba
papi
cli
vulnerability
file deletion
operating system
integrity

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

0.001 Low

EPSS

Percentile

22.0%

There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba’s access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.

Affected configurations

NVD
Node
arubanetworksarubaosRange10.3.0.010.4.0.3
OR
arubanetworksarubaosMatch10.5.0.0
OR
hpinstantosRange6.4.0.08.6.0.23
OR
hpinstantosRange8.10.0.08.10.0.9
OR
hpinstantosRange8.11.0.08.11.2.0

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

0.001 Low

EPSS

Percentile

22.0%

Related for NVD:CVE-2023-45617