CVE-2022-23691

A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches versions:...

CVE-2022-23688

CVE-2022-23688 concerns multiple vulnerabilities in the LLDP service of ArubaOS-CX. The issues affect the way packet data is processed, potentially allowing an attacker to disrupt the availability of the LLDP service and, by extension, the switch management plane. Affected ArubaOS-CX Switches inc...

CVE-2022-23687

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23686

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23687

CVE-2022-23687 affects ArubaOS-CX switches, where multiple vulnerabilities in the LLDP service arise from how packet data is processed. Affected versions are ArubaOS-CX 10.09.xxxx (≤10.09.1010), 10.08.xxxx (≤10.08.1050), and 10.06.xxxx (≤10.06.0190). Successful exploitation may impact the availab...

CVE-2022-23680

CVE-2022-23680 involves ArubaOS-CX switches lacking Anti-CSRF protections for state-changing operations. Affected versions include ArubaOS-CX 10.10.xxxx up to 10.10.0002, 10.09.xxxx up to 10.09.1020, 10.08.xxxx up to 10.08.1060, and 10.06.xxxx up to 10.06.0200. Multiple connected sources (NVD, Re...

CVE-2022-23684

CVE-2022-23684 is a vulnerability in the web-based management interface of ArubaOS‑CX switches that lets a remote authenticated user with read‑only privileges escalate to administrative rights. Affected releases include ArubaOS‑CX Switches 10.09.xxxx up to 10.09.1020 and below, 10.08.xxxx up to 1...

CVE-2022-23683

Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete...

CVE-2022-23680

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...

CVE-2022-23679

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...

CVE-2022-23679

ArubaOS-CX switches are affected by CVE-2022-23679 due to lack of Anti-CSRF protections for state-changing operations. The issue enables an attacker to execute actions in the context of another user on affected releases (AOS-CX 10.10.xxxx up to 10.10.0002, 10.09.xxxx up to 10.09.1020, 10.08.xxxx ...

PT-2022-16197 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1010 and below ArubaOS-CX Switches versions 10.08.1050 and below ArubaOS-CX Switches versions 10.06.0190 and below Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP...

PT-2022-16188 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.06.0200 and below ArubaOS-CX Switches versions 10.08.1060 and below ArubaOS-CX Switches versions 10.09.1020 and below ArubaOS-CX Switches versions 10.10.0002 and below Description: The issue is related to the...

PT-2022-16193 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.06.0210 and below ArubaOS-CX Switches versions 10.08.1070 and below ArubaOS-CX Switches versions 10.09.1030 and below ArubaOS-CX Switches versions 10.10.0002 and below Description: Authenticated command injecti...

PT-2022-16202 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.10.0002 and below ArubaOS-CX Switches versions 10.09.1030 and below ArubaOS-CX Switches versions 10.08.1070 and below ArubaOS-CX Switches versions 10.06.0210 and below Description: A vulnerability exists in...

PT-2022-16196 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1010 and below ArubaOS-CX Switches versions 10.08.1050 and below ArubaOS-CX Switches versions 10.06.0190 and below Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP...

PT-2022-16201 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.10.0002 and below ArubaOS-CX Switches versions 10.09.1020 and below ArubaOS-CX Switches versions 10.08.1060 and below ArubaOS-CX Switches versions 10.06.0200 and below Description: A vulnerability in the...

PT-2022-16190 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.06.0200 and below ArubaOS-CX Switches versions 10.08.1060 and below ArubaOS-CX Switches versions 10.09.1020 and below ArubaOS-CX Switches versions 10.10.0002 and below Description: The issue is related to the...

Security Bulletin: Vulnerability in Fabric OS firmware used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS FOS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID:CVE-2021-4044 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by invalid handling of X509verifycert intern...

Security Bulletin: Vulnerability in Fabric OS firmware used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS FOS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID:CVE-2021-23841 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference in the X509issuerandserialhash functio...