CVE-2023-22762: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-22762?
CVE-2023-22762 is an authenticated command injection vulnerability in the ArubaOS command line interface, which allows an authenticated user to execute arbitrary commands as a privileged user on the underlying operating system.
How severe is CVE-2023-22762?
CVE-2023-22762 has a severity rating of 7.2, which is considered high.
What software versions are affected by CVE-2023-22762?
CVE-2023-22762 affects ArubaOS versions 8.6.0.0 to 8.6.0.19, 8.10.0.0 to 8.10.0.4, and 10.3.0.0 to 10.3.1.0.
How can I fix CVE-2023-22762?
To fix CVE-2023-22762, it is recommended to upgrade to a version of ArubaOS that is not affected by the vulnerability.
Where can I find more information about CVE-2023-22762?
More information about CVE-2023-22762 can be found at the following reference: [link](https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt)