Lucene search
K

201 matches found

OSV
OSV
added 2023/05/08 3:15 p.m.2 views

CVE-2023-22787

An unauthenticated Denial of Service DoS vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

7.5CVSS5.8AI score0.00267EPSS
Exploits0References1
OSV
OSV
added 2023/05/08 3:15 p.m.1 views

CVE-2023-22791

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in whi...

4.8CVSS5.8AI score0.00162EPSS
Exploits0References1
NVD
NVD
added 2023/05/08 3:15 p.m.14 views

CVE-2023-22791

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in whi...

5.4CVSS5.8AI score0.00162EPSS
Exploits0References1
OSV
OSV
added 2023/05/08 3:15 p.m.2 views

CVE-2023-22790

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

8.8CVSS7.6AI score0.00515EPSS
Exploits0References1
Prion
Prion
added 2023/05/08 3:15 p.m.20 views

Information disclosure

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in whi...

1.4CVSS6AI score0.00162EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2023/05/08 3:15 p.m.24 views

Denial of service

An unauthenticated Denial of Service DoS vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

5CVSS7.9AI score0.00267EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2023/05/08 3:15 p.m.14 views

Command injection

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

6.5CVSS9.4AI score0.00515EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2023/05/08 3:15 p.m.18 views

Command injection

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

6.5CVSS9.4AI score0.00515EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2023/05/08 3:15 p.m.15 views

Command injection

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

6.5CVSS9.4AI score0.00413EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2023/05/08 2:10 p.m.46 views

CVE-2023-22791

CVE-2023-22791 affects Aruba InstantOS and ArubaOS 10, where an edge-case combination of network configuration and WLAN environment with an attacker who has valid credentials can disclose potentially sensitive information over the WLAN. The vulnerability is documented across multiple sources (NVD...

5.4CVSS5.5AI score0.00162EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/05/08 2:10 p.m.10 views

CVE-2023-22791 Aruba InstantOS and ArubaOS 10 Sensitive Information Disclosure

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in whi...

5.4CVSS5.4AI score0.00162EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/08 2:10 p.m.17 views

CVE-2023-22791 Aruba InstantOS and ArubaOS 10 Sensitive Information Disclosure

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in whi...

5.4CVSS5.7AI score0.00162EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/08 2:8 p.m.15 views

CVE-2023-22790 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS9.3AI score0.00515EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/08 2:8 p.m.6 views

CVE-2023-22790 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS8AI score0.00515EPSS
Exploits0References1
CVE
CVE
added 2023/05/08 2:8 p.m.67 views

CVE-2023-22790

CVE-2023-22790 is part of a set of authenticated command-injection flaws affecting Aruba InstantOS and ArubaOS 10 CLI. The connected documents identify multiple CVEs (including 22788–22791) describing that an attacker with valid credentials can execute arbitrary commands as a privileged user on t...

8.8CVSS8.4AI score0.00515EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2023/05/08 2:8 p.m.15 views

CVE-2023-22789 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS9.3AI score0.00413EPSS
Exploits0References1
CVE
CVE
added 2023/05/08 2:8 p.m.50 views

CVE-2023-22789

CVE-2023-22789 affects Aruba InstantOS and ArubaOS 10 CLI. Multiple authenticated command-injection vulnerabilities allow an attacker with valid credentials to execute arbitrary commands as a privileged OS user. Connected sources also describe related CVEs (22787–22791) affecting the same Aruba p...

8.8CVSS8.4AI score0.00413EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/05/08 2:8 p.m.5 views

CVE-2023-22789 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS8AI score0.00413EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/08 2:8 p.m.7 views

CVE-2023-22788 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS9.2AI score0.00515EPSS
Exploits0References1
CVE
CVE
added 2023/05/08 2:8 p.m.53 views

CVE-2023-22788

CVE-2023-22788 involves multiple authenticated command injection vulnerabilities in the Aruba InstantOS and ArubaOS 10 command line interface. The underlying issue allows an attacker with authenticated access to execute arbitrary commands as a privileged user on the underlying OS. Affected stack ...

8.8CVSS8.4AI score0.00515EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder