Lucene search

HpeVULNRICHMENT:CVE-2023-39268

HistoryAug 29, 2023 - 7:38 p.m.

CVE-2023-39268 Memory Corruption Vulnerability in ArubaOS-Switch

2023-08-2919:38:58

hpe

github.com

arubaos-switch

memory corruption

remote code execution

vulnerability

unauthenticated

CVSS3

4.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High

EPSS

0.004

Percentile

73.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt

CVSS3

4.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High

EPSS

0.004

Percentile

73.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-39268