CVE-2022-23689

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23688

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23688

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

Security feature bypass

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

Security feature bypass

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

Security feature bypass

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23689

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23689

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23688

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23688

CVE-2022-23688 concerns multiple vulnerabilities in the LLDP service of ArubaOS-CX. The issues affect the way packet data is processed, potentially allowing an attacker to disrupt the availability of the LLDP service and, by extension, the switch management plane. Affected ArubaOS-CX Switches inc...

CVE-2022-23689

CVE-2022-23689 concerns multiple vulnerabilities in the LLDP service of ArubaOS-CX switches. The issues arise in the processing of packet data and may impact the availability of the LLDP service and the switch’s management plane. Affected products are ArubaOS-CX Switches running AOS-CX 10.09.xxxx...

CVE-2022-23687

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23686

ArubaOS-CX LLDP service processing in AOS-CX is vulnerable. Affected versions are ArubaOS-CX Switches 10.09.xxxx up to 10.09.1010 and below, 10.08.xxxx up to 10.08.1050 and below, and 10.06.xxxx up to 10.06.0190 and below. The vulnerabilities may impact LLDP service availability and/or the manage...

CVE-2022-23687

CVE-2022-23687 affects ArubaOS-CX switches, where multiple vulnerabilities in the LLDP service arise from how packet data is processed. Affected versions are ArubaOS-CX 10.09.xxxx (≤10.09.1010), 10.08.xxxx (≤10.08.1050), and 10.06.xxxx (≤10.06.0190). Successful exploitation may impact the availab...

CVE-2022-23686

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

PT-2022-16199 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1010 and below ArubaOS-CX Switches versions 10.08.1050 and below ArubaOS-CX Switches versions 10.06.0190 and below Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP...

CISA releases 5 Industrial Control Systems Advisories

CISA has released 5 Industrial Control Systems ICS advisories on August 18, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

Citrix ADC MPX/SDX Fortville NIC Err-Disabled when LLDP Is enabled on Peer Switch/Router

If Citrix ADC is connected to a switch/router via Fortville NIC For example 10G port on MPX 8900, interface will show UP for a moment then go to Err-Disabled state. Running "show interface" command on ADC, you can find ADC Fortville NIC is in Err-Disabled State, along with TX Stall andHang counts...

OpenFlow plugin for OpenDaylight allows spoofing the SDN topology

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."...

LLDP Spoofing

Overview Affected versions of this package are vulnerable to LLDP Spoofing that allows an attacker to fake the SDN topology and manipulate the flow of data. Remediation Upgrade org.opendaylight.openflowplugin:openflowplugin to version 0.0.6-Helium-SR3 or higher. References - Gerrit Fix - Gerrit F...