CVE-2023-35975

CVE-2023-35975 describes an authenticated path traversal in ArubaOS CLI that allows deletion of arbitrary files in the underlying OS. Affected products are ArubaOS versions prior to fixed releases; Nessus ARUBA-PSA-2023-008 lists ArubaOS <8.6.0.21, <8.10.0.7, <8.11.1.1, and

CVE-2023-35974 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

PT-2023-5615

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue is related to authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation of these vulnerabilities allows an attacker to execute...

Aruba Networks ArubaOS information leakage vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. An information disclosure vulnerability exists in Aruba Networks ArubaOS, which arises from a command line interface that allow...

Aruba Networks ArubaOS Command Injection Vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. Aruba Networks ArubaOS suffers from a command injection vulnerability that originates from an authenticated command injection i...

PT-2023-3997 · Cisco · Cisco Broadworks

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks affected versions not specified Description: The issue exists due to insufficient input validation by the operating system CLI, allowing an attacker to elevate privileges to the root user on an affected device. An attacker...

Aruba Networks ArubaOS information leakage vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. An information disclosure vulnerability exists in Aruba Networks ArubaOS, which arises from a command line interface that allow...

CVE-2023-35977: Undefined Security Weakness

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35976: Undefined Security Weakness

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35975: Improper Limitation of a Pathname to a Restricted Directory

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-35974: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-35973: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

Aruba Networks ArubaOS Cross-site Scripting Vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from a command line interface that allows an...

Aruba Networks ArubaOS Command Injection Vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. Aruba Networks ArubaOS suffers from a command injection vulnerability that originates from an authenticated command injection i...

How to Change the Maximum Segment Size on a NetScaler Appliance

This article describes how to change the Maximum Segment Size MSS for all sourced packets from a NetScaler appliance. Requirements Command line access to the NetScaler appliance through the console or a Secure Shell SSH client General knowledge of the NetScaler Command Line Interface CLI and UNIX...

FortiADC CLI Command Execution

The vulnerability of the command-line interface CLI of the FortiADC application controller is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Cisco TelePresence Collaboration Endpoint Command-Line Interface Access Control

The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint conference call controllers and Cisco RoomOS operating systems is related to access control deficiencies. Exploiting this vulnerability can allow attackers to bypass acce...

Cisco Expressway micro-programming Command-Line Interface Privilege Escalation

The vulnerability of the command-line interface CLI of Cisco Expressway micro-programming software and the Cisco TelePresence Video Communication Server VCS micro-programming software for device management involves shortcomings in role-based access control. Exploiting this vulnerability can allow...

CVE-2023-26210

Multiple improper neutralization of special elements used in an os command 'OS Command Injection' vulnerabilties CWE-78 vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as root user via crafted CLI requests...

PT-2023-3233 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0 through 7.2.3 FortiProxy versions 1.0 through 7.2.2 Description: The issue is related to an out-of-bounds write in memory, which can be exploited to allow an attacker to escalate their privileges. This can be achieved via...