Arubaos-Cx Security Vulnerabilities - 2023

CVE-2023-1168

An authenticated remote code execution vulnerabilityexists in the AOS-CX Network Analytics Engine. Successfulexploitation of this vulnerability results in the ability toexecute arbitrary code as a privileged user on the underlyingoperating system, leading to a complete compromise of theswitch runni...

CVE-2023-3718

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker to...