CVE-2022-23680

CVE-2022-23680 involves ArubaOS-CX switches lacking Anti-CSRF protections for state-changing operations. Affected versions include ArubaOS-CX 10.10.xxxx up to 10.10.0002, 10.09.xxxx up to 10.09.1020, 10.08.xxxx up to 10.08.1060, and 10.06.xxxx up to 10.06.0200. Multiple connected sources (NVD, Re...

CVE-2022-23681

ArubaOS-CX exposes authenticated command-injection vulnerabilities in the AOS-CX CLI. Affected versions are 10.09.1030 and below, 10.08.1030 and below, and 10.06.0180 and below. Successful exploitation could allow an attacker to run arbitrary commands as root, potentially compromising the switch....

CVE-2022-23680

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...

CVE-2022-23679

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...

CVE-2022-23679

ArubaOS-CX switches are affected by CVE-2022-23679 due to lack of Anti-CSRF protections for state-changing operations. The issue enables an attacker to execute actions in the context of another user on affected releases (AOS-CX 10.10.xxxx up to 10.10.0002, 10.09.xxxx up to 10.09.1020, 10.08.xxxx ...

CVE-2022-23686: Undefined Security Weakness

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23682: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23689: Undefined Security Weakness

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23681: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

Vulnerabilities fixed in Aruba AOS-CX switches

Vulnerabilities have been fixed in several Aruba AOS-CX switches. These vulnerabilities do not apply to wireless products. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Denial-of-Service DoS...

Aruba AOS-CX 安全漏洞

Aruba AOS-CX is a modern programmable network from Aruba. A security vulnerability exists in the Aruba AOS-CX, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Aruba AOS-CX 资源管理错误漏洞

Aruba AOS-CX is a modern programmable network from Aruba. A security vulnerability exists in the Aruba AOS-CX, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Aruba AOS-CX 安全漏洞

Aruba AOS-CX is a modern programmable network from Aruba. A security vulnerability exists in the Aruba AOS-CX, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Aruba AOS-CX 跨站请求伪造漏洞

Aruba AOS-CX is a modern programmable network from Aruba. A security vulnerability exists in the Aruba AOS-CX, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

HPESBNW04363 rev.2 - Aruba AOS-CX Switches, Multiple Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Authentication Bypass; Remote: Arbitrary Code Execution, Disclosure of Information, Server-Side Request Forgery SSRF, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. ArubaOS-CX Switches AOS-CX 10.10.xxx...

CVE-2021-41003

Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series...

CVE-2021-41003

Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series...

CVE-2021-41000

Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch...

CVE-2021-41001

An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine NAE in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch...

CVE-2021-41002

Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch...