CVE-2023-22765: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Published Feb 28, 2023
·Updated
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
51 affected components
All of the following
Any of the following
Arubanetworks Arubaos>=8.6.0.0<=8.6.0.19
Arubanetworks Arubaos>=8.10.0.0<=8.10.0.4
Arubanetworks Arubaos>=10.3.0.0<=10.3.1.0
Any of the following
Arubanetworks 7010
Arubanetworks 7030
Arubanetworks 7205
Arubanetworks 7210
Arubanetworks 7220
Arubanetworks 7240xm
Arubanetworks 7280
Arubanetworks 9004
Arubanetworks 9004-lte
Arubanetworks 9012
Arubanetworks Mc-va-10
Arubanetworks Mc-va-1k
Arubanetworks Mc-va-250
Arubanetworks Mc-va-50
Arubanetworks Mcr-hw-10k
Arubanetworks Mcr-hw-1k
Arubanetworks Mcr-hw-5k
Arubanetworks Mcr-va-10k
Arubanetworks Mcr-va-1k
Arubanetworks Mcr-va-50
Arubanetworks Mcr-va-500
Arubanetworks Mcr-va-5k
Arubanetworks Sd-wan>=8.7.0.0-2.3.0.0<=8.7.0.0-2.3.0.8
Arubanetworks Arubaos>=8.6.0.0<=8.6.0.19
Arubanetworks Arubaos>=8.10.0.0<=8.10.0.4
Arubanetworks Arubaos>=10.3.0.0<=10.3.1.0
Arubanetworks 7010
Arubanetworks 7030
Arubanetworks 7205
Arubanetworks 7210
Arubanetworks 7220
Arubanetworks 7240xm
Arubanetworks 7280
Arubanetworks 9004
Arubanetworks 9004-lte
Arubanetworks 9012
Arubanetworks Mc-va-10
Arubanetworks Mc-va-1k
Arubanetworks Mc-va-250
Arubanetworks Mc-va-50
Arubanetworks Mcr-hw-10k
Arubanetworks Mcr-hw-1k
Arubanetworks Mcr-hw-5k
Arubanetworks Mcr-va-10k
Arubanetworks Mcr-va-1k
Arubanetworks Mcr-va-50
Arubanetworks Mcr-va-500
Arubanetworks Mcr-va-5k
Event History
Feb 28, 2023
CVE Published
via MITRE·04:47 PM
Data Sourced
via MITRE·04:47 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-22765?
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
2
What is the severity of CVE-2023-22765?
The severity of CVE-2023-22765 is high with a severity value of 7.2.
3
How does CVE-2023-22765 affect ArubaOS?
CVE-2023-22765 affects ArubaOS versions 8.6.0.0 to 8.6.0.19, 8.10.0.0 to 8.10.0.4, and 10.3.0.0 to 10.3.1.0.
4
What can an attacker do if CVE-2023-22765 is successfully exploited?
If successfully exploited, an attacker can execute arbitrary commands as a privileged user on the underlying operating system.
5
How can I fix CVE-2023-22765?
To fix CVE-2023-22765, update ArubaOS to a version that is not affected by the vulnerability.