CVE-2023-35973: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-35973?
CVE-2023-35973 refers to authenticated command injection vulnerabilities in the ArubaOS command line interface.
What is the severity of CVE-2023-35973?
CVE-2023-35973 has a severity value of 7.2, which is considered high.
Which versions of ArubaOS are affected by CVE-2023-35973?
ArubaOS versions 6.5.4.0 to 8.6.0.21, 8.7.0.0 to 8.10.0.7, 8.11.0.0 to 8.11.1.1, and 10.4.0.0 to 10.4.0.2 are affected by CVE-2023-35973.
How can CVE-2023-35973 be exploited?
Successful exploitation of CVE-2023-35973 allows an authenticated user to execute arbitrary commands as a privileged user on the underlying operating system.
Where can I find more information about CVE-2023-35973?
For more information about CVE-2023-35973, refer to the following reference: [Aruba Security Advisory ARUBA-PSA-2023-008](https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-008.txt)