CVE-2023-22768: Command Injection
First published: Wed Mar 01 2023(Updated: )
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| arubanetworks ArubaOS | >=8.6.0.0<=8.6.0.19 | |
| arubanetworks ArubaOS | >=8.10.0.0<=8.10.0.4 | |
| arubanetworks ArubaOS | >=10.3.0.0<=10.3.1.0 | |
| Aruba 7010 | ||
| Aruba Networks 7030 | ||
| Aruba Networks 7205 | ||
| Aruba Networks 7210 | ||
| Aruba Networks 7220 | ||
| Aruba Networks 7240XM | ||
| Aruba Networks 7280 | ||
| Aruba Networks 9004 | ||
| Arubanetworks 9004-LTE | ||
| Aruba Networks 9012 | ||
| Aruba Networks MC-VA | ||
| Aruba Networks MC-VA-1K | ||
| Aruba Networks MC-VA-250 | ||
| Aruba Networks MC-VA-50 | ||
| Aruba Networks MCR-HW-10K | ||
| Arubanetworks MCR-HW-1K | ||
| Aruba Networks MCR-HW-5K | ||
| Aruba Networks MCR-VA 10K | ||
| Aruba Networks MCR-VA-1K | ||
| Aruba Networks MCR-VA-50 | ||
| Aruba Networks MCR-VA 500 | ||
| Aruba Networks MCR-VA 5K | ||
| Aruba Networks SD-WAN | >=8.7.0.0-2.3.0.0<=8.7.0.0-2.3.0.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this ArubaOS vulnerability?
The vulnerability ID for this ArubaOS vulnerability is CVE-2023-22768.
What is the severity rating of CVE-2023-22768?
The severity rating of CVE-2023-22768 is high (7.2).
What is the affected software for CVE-2023-22768?
The affected software for CVE-2023-22768 includes ArubaOS versions 8.6.0.0 to 8.6.0.19, 8.10.0.0 to 8.10.0.4, and 10.3.0.0 to 10.3.1.0.
What are the CWE IDs associated with CVE-2023-22768?
The CWE IDs associated with CVE-2023-22768 include CWE-77.
Where can I find more information about CVE-2023-22768?
You can find more information about CVE-2023-22768 in the reference provided by Aruba Networks: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/arubanetworks
- canonical/arubanetworks arubaos
- version/arubanetworks arubaos/8.6.0.0
- version/arubanetworks arubaos/8.6.0.19
- version/arubanetworks arubaos/8.10.0.0
- version/arubanetworks arubaos/8.10.0.4
- version/arubanetworks arubaos/10.3.0.0
- version/arubanetworks arubaos/10.3.1.0
- canonical/aruba 7010
- canonical/aruba networks 7030
- canonical/aruba networks 7205
- canonical/aruba networks 7210
- canonical/aruba networks 7220
- canonical/aruba networks 7240xm
- canonical/aruba networks 7280
- canonical/aruba networks 9004
- canonical/arubanetworks 9004-lte
- canonical/aruba networks 9012
- canonical/aruba networks mc-va
- canonical/aruba networks mc-va-1k
- canonical/aruba networks mc-va-250
- canonical/aruba networks mc-va-50
- canonical/aruba networks mcr-hw-10k
- canonical/arubanetworks mcr-hw-1k
- canonical/aruba networks mcr-hw-5k
- canonical/aruba networks mcr-va 10k
- canonical/aruba networks mcr-va-1k
- canonical/aruba networks mcr-va-50
- canonical/aruba networks mcr-va 500
- canonical/aruba networks mcr-va 5k
- canonical/aruba networks sd-wan
- version/aruba networks sd-wan/8.7.0.0-2.3.0.0
- version/aruba networks sd-wan/8.7.0.0-2.3.0.8