CVE-2023-22749: Multiple Unauthenticated Command Injections in the PAPI Protocol
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-22749?
CVE-2023-22749 is a vulnerability that allows unauthenticated remote code execution by exploiting multiple command injection vulnerabilities in Aruba Networks access point management protocol (PAPI).
What is the impact of CVE-2023-22749?
Successful exploitation of CVE-2023-22749 can result in unauthorized remote code execution on affected systems.
How can CVE-2023-22749 be exploited?
CVE-2023-22749 can be exploited by sending specially crafted packets to the PAPI UDP port (8211) of the Aruba Networks access point management protocol.
Which software versions are affected by CVE-2023-22749?
CVE-2023-22749 affects Arubanetworks Sd-wan versions 8.7.0.0-2.3.0.0 to 8.7.0.0-2.3.0.8, Arubanetworks Arubaos versions 8.6.0.0 to 8.6.0.19, Arubanetworks Arubaos versions 8.10.0.0 to 8.10.0.4, and Arubanetworks Arubaos versions 10.3.0.0 to 10.3.1.0.
How can I protect myself from CVE-2023-22749?
To protect yourself from CVE-2023-22749, it is recommended to update the affected software versions to the latest available patches or versions.