CVE-2023-22790: Command Injection
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-22790?
CVE-2023-22790 is a vulnerability that allows authenticated attackers to execute arbitrary commands as a privileged user on the affected systems.
What is the severity of CVE-2023-22790?
CVE-2023-22790 has a severity score of 8.8, which is considered high.
Which versions of ArubaOS and Aruba InstantOS are affected by CVE-2023-22790?
Versions between 10.3.0.0 and 10.3.1.0 of ArubaOS and versions between 6.4.0.0 and 6.4.4.8-4.2.4.20 of Aruba InstantOS are affected.
How can the vulnerability CVE-2023-22790 be exploited?
The vulnerability can be exploited by authenticated attackers to execute arbitrary commands as a privileged user.
Is there a fix for CVE-2023-22790?
Yes, it is recommended to update to a fixed version of ArubaOS or Aruba InstantOS to mitigate the vulnerability.