CVE-2023-22768: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Published Feb 28, 2023
·Updated
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
26 affected components
Arubanetworks Arubaos>=8.6.0.0<=8.6.0.19
Arubanetworks Arubaos>=8.10.0.0<=8.10.0.4
Arubanetworks Arubaos>=10.3.0.0<=10.3.1.0
Arubanetworks 7010
Arubanetworks 7030
Arubanetworks 7205
Arubanetworks 7210
Arubanetworks 7220
Arubanetworks 7240xm
Arubanetworks 7280
Arubanetworks 9004
Arubanetworks 9004-lte
Arubanetworks 9012
Arubanetworks Mc-va-10
Arubanetworks Mc-va-1k
Arubanetworks Mc-va-250
Arubanetworks Mc-va-50
Arubanetworks Mcr-hw-10k
Arubanetworks Mcr-hw-1k
Arubanetworks Mcr-hw-5k
Arubanetworks Mcr-va-10k
Arubanetworks Mcr-va-1k
Arubanetworks Mcr-va-50
Arubanetworks Mcr-va-500
Arubanetworks Mcr-va-5k
Arubanetworks Sd-wan>=8.7.0.0-2.3.0.0<=8.7.0.0-2.3.0.8
Event History
Feb 28, 2023
CVE Published
via MITRE·04:49 PM
Data Sourced
via MITRE·04:49 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the vulnerability ID for this ArubaOS vulnerability?
The vulnerability ID for this ArubaOS vulnerability is CVE-2023-22768.
2
What is the severity rating of CVE-2023-22768?
The severity rating of CVE-2023-22768 is high (7.2).
3
What is the affected software for CVE-2023-22768?
The affected software for CVE-2023-22768 includes ArubaOS versions 8.6.0.0 to 8.6.0.19, 8.10.0.0 to 8.10.0.4, and 10.3.0.0 to 10.3.1.0.
4
What are the CWE IDs associated with CVE-2023-22768?
The CWE IDs associated with CVE-2023-22768 include CWE-77.
5
Where can I find more information about CVE-2023-22768?
You can find more information about CVE-2023-22768 in the reference provided by Aruba Networks: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt