CVE-2023-22770: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-22770.
What is the severity of CVE-2023-22770?
The severity of CVE-2023-22770 is high, with a severity value of 7.2.
Which software is affected by CVE-2023-22770?
ArubaOS versions 8.6.0.0 to 8.6.0.19, 8.10.0.0 to 8.10.0.4, and 10.3.0.0 to 10.3.1.0 are affected by CVE-2023-22770.
How can CVE-2023-22770 be exploited?
CVE-2023-22770 can be exploited by authenticated users, allowing them to execute arbitrary commands as a privileged user on the underlying operating system.
Is there a fix available for CVE-2023-22770?
Yes, Aruba Networks has released a security advisory with fixes for CVE-2023-22770. Please refer to the advisory for more information.