CVE-2022-23680: CSRF

First published: Tue Sep 06 2022(Updated: )

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.

Credit: security-alert@hpe.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/severity
• agent/weakness
• agent/references
• agent/author
• agent/type
• agent/description
• agent/event
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/arubanetworks
• canonical/arubanetworks aos-cx
• version/arubanetworks aos-cx/10.06.0000
• version/arubanetworks aos-cx/10.08.0000
• version/arubanetworks aos-cx/10.09.0000
• version/arubanetworks aos-cx/10.10.0000
• canonical/arubanetworks cx 10000
• canonical/arubanetworks cx 8325
• canonical/arubanetworks cx 8320
• canonical/arubanetworks cx 9300
• canonical/arubanetworks cx 8360
• canonical/arubanetworks cx 6400
• canonical/arubanetworks cx 6300
• canonical/arubanetworks cx 6200f
• canonical/arubanetworks cx 6100
• canonical/arubanetworks cx 6000
• canonical/arubanetworks cx 4100i
• canonical/arubanetworks cx 8400