CVE-2022-23682: OS Command Injection

First published: Tue Sep 06 2022(Updated: )

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version(s): AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.06.xxxx: 10.06.0180 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.

Credit: security-alert@hpe.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/severity
• agent/weakness
• agent/references
• agent/author
• agent/description
• agent/tags
• agent/event
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• collector/mitre-cve
• source/MITRE
• vendor/arubanetworks
• canonical/arubanetworks aos-cx
• version/arubanetworks aos-cx/10.06.0000
• version/arubanetworks aos-cx/10.08.0000
• version/arubanetworks aos-cx/10.09.0000
• version/arubanetworks aos-cx/10.10.0000
• canonical/arubanetworks cx 10000
• canonical/arubanetworks cx 8325
• canonical/arubanetworks cx 8320
• canonical/arubanetworks cx 9300
• canonical/arubanetworks cx 8360
• canonical/arubanetworks cx 6400
• canonical/arubanetworks cx 6300
• canonical/arubanetworks cx 6200f
• canonical/arubanetworks cx 6100
• canonical/arubanetworks cx 6000
• canonical/arubanetworks cx 4100i
• canonical/arubanetworks cx 8400