CVE-2023-22776: Path Traversal
First published: Wed Mar 01 2023(Updated: )
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arubanetworks Arubaos | >=8.6.0.0<=8.6.0.19 | |
| Arubanetworks Arubaos | >=8.10.0.0<=8.10.0.4 | |
| Arubanetworks Arubaos | >=10.3.0.0<=10.3.1.0 | |
| Arubanetworks 7010 | ||
| Arubanetworks 7030 | ||
| Arubanetworks 7205 | ||
| Arubanetworks 7210 | ||
| Arubanetworks 7220 | ||
| Arubanetworks 7240xm | ||
| Arubanetworks 7280 | ||
| Arubanetworks 9004 | ||
| Arubanetworks 9004-lte | ||
| Arubanetworks 9012 | ||
| Arubanetworks Mc-va-10 | ||
| Arubanetworks Mc-va-1k | ||
| Arubanetworks Mc-va-250 | ||
| Arubanetworks Mc-va-50 | ||
| Arubanetworks Mcr-hw-10k | ||
| Arubanetworks Mcr-hw-1k | ||
| Arubanetworks Mcr-hw-5k | ||
| Arubanetworks Mcr-va-10k | ||
| Arubanetworks Mcr-va-1k | ||
| Arubanetworks Mcr-va-50 | ||
| Arubanetworks Mcr-va-500 | ||
| Arubanetworks Mcr-va-5k | ||
| Arubanetworks Sd-wan | >=8.7.0.0-2.3.0.0<=8.7.0.0-2.3.0.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-22776.
What is the severity of CVE-2023-22776?
CVE-2023-22776 has a severity value of 4.9, which is classified as medium.
What is the affected software for CVE-2023-22776?
The affected software for CVE-2023-22776 includes ArubaOS versions between 8.6.0.0 to 8.6.0.19, 8.10.0.0 to 8.10.0.4, and 10.3.0.0 to 10.3.1.0.
How does CVE-2023-22776 impact the system?
Successful exploitation of CVE-2023-22776 allows an authenticated attacker to read arbitrary files on the underlying operating system, including sensitive system files.
Is the Arubanetworks 7010 vulnerable to CVE-2023-22776?
No, the Arubanetworks 7010 is not vulnerable to CVE-2023-22776.
- collector/nvd-index
- vendor/arubanetworks
- canonical/arubanetworks arubaos
- version/arubanetworks arubaos/8.6.0.0
- version/arubanetworks arubaos/8.6.0.19
- version/arubanetworks arubaos/8.10.0.0
- version/arubanetworks arubaos/8.10.0.4
- version/arubanetworks arubaos/10.3.0.0
- version/arubanetworks arubaos/10.3.1.0
- canonical/arubanetworks 7010
- canonical/arubanetworks 7030
- canonical/arubanetworks 7205
- canonical/arubanetworks 7210
- canonical/arubanetworks 7220
- canonical/arubanetworks 7240xm
- canonical/arubanetworks 7280
- canonical/arubanetworks 9004
- canonical/arubanetworks 9004-lte
- canonical/arubanetworks 9012
- canonical/arubanetworks mc-va-10
- canonical/arubanetworks mc-va-1k
- canonical/arubanetworks mc-va-250
- canonical/arubanetworks mc-va-50
- canonical/arubanetworks mcr-hw-10k
- canonical/arubanetworks mcr-hw-1k
- canonical/arubanetworks mcr-hw-5k
- canonical/arubanetworks mcr-va-10k
- canonical/arubanetworks mcr-va-1k
- canonical/arubanetworks mcr-va-50
- canonical/arubanetworks mcr-va-500
- canonical/arubanetworks mcr-va-5k
- canonical/arubanetworks sd-wan
- version/arubanetworks sd-wan/8.7.0.0-2.3.0.0
- version/arubanetworks sd-wan/8.7.0.0-2.3.0.8