CVE-2022-23689

CVE-2022-23689 concerns multiple vulnerabilities in the LLDP service of ArubaOS-CX switches. The issues arise in the processing of packet data and may impact the availability of the LLDP service and the switch’s management plane. Affected products are ArubaOS-CX Switches running AOS-CX 10.09.xxxx...

CVE-2022-23691

CVE-2022-23691 affects ArubaOS-CX Switches. The vulnerability allows bypassing system authentication via the recovery console, potentially leading to total switch compromise. Affected versions include ArubaOS‑CX 10.10.xxxx up to 10.10.0002, 10.09.xxxx up to 10.09.1030, 10.08.xxxx up to 10.08.1070...

CVE-2022-23688

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23687

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23686

ArubaOS-CX LLDP service processing in AOS-CX is vulnerable. Affected versions are ArubaOS-CX Switches 10.09.xxxx up to 10.09.1010 and below, 10.08.xxxx up to 10.08.1050 and below, and 10.06.xxxx up to 10.06.0190 and below. The vulnerabilities may impact LLDP service availability and/or the manage...

CVE-2022-23687

CVE-2022-23687 affects ArubaOS-CX switches, where multiple vulnerabilities in the LLDP service arise from how packet data is processed. Affected versions are ArubaOS-CX 10.09.xxxx (≤10.09.1010), 10.08.xxxx (≤10.08.1050), and 10.06.xxxx (≤10.06.0190). Successful exploitation may impact the availab...

CVE-2022-23686

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23680

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...

CVE-2022-23680

CVE-2022-23680 involves ArubaOS-CX switches lacking Anti-CSRF protections for state-changing operations. Affected versions include ArubaOS-CX 10.10.xxxx up to 10.10.0002, 10.09.xxxx up to 10.09.1020, 10.08.xxxx up to 10.08.1060, and 10.06.xxxx up to 10.06.0200. Multiple connected sources (NVD, Re...

CVE-2022-23682

Multiple vulnerabilities exist in the Aruba AOS-CX command line interface that could permit authenticated command injection, allowing an attacker to execute arbitrary commands as root and fully compromise the switch. Affected ArubaOS-CX versions are: 10.09.xxxx up to 10.09.1030, 10.08.xxxx up to ...

CVE-2022-23681

ArubaOS-CX exposes authenticated command-injection vulnerabilities in the AOS-CX CLI. Affected versions are 10.09.1030 and below, 10.08.1030 and below, and 10.06.0180 and below. Successful exploitation could allow an attacker to run arbitrary commands as root, potentially compromising the switch....

CVE-2022-23683

CVE-2022-23683 describes authenticated command‑injection vulnerabilities in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation allows executing arbitrary commands as a privileged user on the underlying OS, potentially achieving complete compromise of switches running Aru...

CVE-2022-23684

CVE-2022-23684 is a vulnerability in the web-based management interface of ArubaOS‑CX switches that lets a remote authenticated user with read‑only privileges escalate to administrative rights. Affected releases include ArubaOS‑CX Switches 10.09.xxxx up to 10.09.1020 and below, 10.08.xxxx up to 1...

CVE-2022-23683

Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete...

CVE-2022-23682

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23681

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23684

A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their...

CVE-2022-23679

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...

CVE-2022-23679

ArubaOS-CX switches are affected by CVE-2022-23679 due to lack of Anti-CSRF protections for state-changing operations. The issue enables an attacker to execute actions in the context of another user on affected releases (AOS-CX 10.10.xxxx up to 10.10.0002, 10.09.xxxx up to 10.09.1020, 10.08.xxxx ...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.16.1)

The version of AOS installed on the remote host is prior to 5.16.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.16.1 advisory. - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this...