CVE-2023-22763: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-22763?
The severity of CVE-2023-22763 is high with a severity value of 7.2.
What is affected by CVE-2023-22763?
ArubaOS versions between 8.6.0.0 to 8.6.0.19, 8.10.0.0 to 8.10.0.4, and 10.3.0.0 to 10.3.1.0 are affected by CVE-2023-22763.
What is the impact of CVE-2023-22763?
Successful exploitation of CVE-2023-22763 allows an authenticated user to execute arbitrary commands as a privileged user on the underlying operating system.
How can I fix CVE-2023-22763?
Apply the necessary security patches provided by Aruba Networks to fix CVE-2023-22763.
Where can I find more information about CVE-2023-22763?
You can find more information about CVE-2023-22763 in the Aruba Networks advisory: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt