CVE-2023-22774

The CVE-2023-22774 entry concerns an authenticated path traversal vulnerability in ArubaOS CLI that allows deletion of arbitrary files on the underlying OS. Affected component is ArubaOS command line interface; root cause involves path traversal in authenticated context. Impact, as described, inc...

CVE-2023-22773 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-22773

CVE-2023-22773 involves an authenticated path-traversal vulnerability in ArubaOS CLI. Exploitation enables deletion of arbitrary files on the underlying OS. Affected product: ArubaOS (CLI path likely used by Mobility Controllers/Gateways). Root cause: path-traversal in CLI handling allows access ...

CVE-2023-22773 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-22772 Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion

An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-22772 Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion

An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-22772

CVE-2023-22772 : An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface, allowing an attacker to delete arbitrary files in the underlying OS. Exploitation details indicate impact to file deletion with an elevated access path under ArubaOS’ web managemen...

CVE-2023-22771 Insufficient Session Expiration in ArubaOS Command Line Interface

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account...

CVE-2023-22771

ArubaOS (CLI) contains an insufficient session expiration vulnerability that allows an attacker to keep a session open after the impacted account is removed. The issue affects ArubaOS Command Line Interface components and is documented as CVE-2023-22771. Impact is described variably across source...

CVE-2023-22771 Insufficient Session Expiration in ArubaOS Command Line Interface

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account...

CVE-2023-22770

CVE-2023-22770 affects ArubaOS, specifically the ArubaOS command line interface used in Mobility Controllers/Gateways. Authenticated command injection arises from insufficient input sanitization in the CLI, enabling execution of arbitrary commands as a privileged OS user. The vulnerability has be...

CVE-2023-22770 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-22770 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-22769 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-22769 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-22769

CVE-2023-22769 affects ArubaOS CLI, enabling authenticated command injection that lets an attacker run arbitrary commands with privileged OS rights. Multiple sources confirm the vulnerability in ArubaOS, with impact described as total compromise to confidentiality, integrity, and availability. Ex...

CVE-2023-22768 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-22768 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-22768

ArubaOS command-line interface contains an authenticated command-injection vulnerability in which an attacker with authenticated access can execute arbitrary commands as a privileged user on the OS. Root cause is related to insufficient input sanitization in the CLI. According to NCSC advisory, f...

CVE-2023-22767

CVE-2023-22767 describes authenticated command injection in ArubaOS CLI, allowing an attacker with high privileges (and network access) to execute arbitrary commands as the underlying OS user. Affects ArubaOS (used in Mobility Controllers/Gateways) via the CLI; CVSSv3.1 base score 7.2 (HIGH) with...