CVE-2023-22769: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-22769?
CVE-2023-22769 is an authenticated command injection vulnerability in the ArubaOS command line interface.
How does CVE-2023-22769 impact ArubaOS?
Successful exploitation of CVE-2023-22769 allows an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
Which versions of ArubaOS are affected by CVE-2023-22769?
ArubaOS versions 8.6.0.0 through 8.6.0.19, 8.10.0.0 through 8.10.0.4, and 10.3.0.0 through 10.3.1.0 are affected by CVE-2023-22769.
What is the severity of CVE-2023-22769?
CVE-2023-22769 has a severity rating of 7.2 (high).
How can I mitigate the risk of CVE-2023-22769?
To mitigate the risk of CVE-2023-22769, it is recommended to update to a non-vulnerable version of ArubaOS when available.