CVE-2023-35974: Authenticated Remote Command Execution in the ArubaOS Command Line Interface
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-35974?
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface, allowing for the execution of arbitrary commands as a privileged user on the underlying operating system.
How severe is CVE-2023-35974?
The severity of CVE-2023-35974 is high, with a severity value of 7.2.
Which software is affected by CVE-2023-35974?
ArubaOS versions 6.5.4.0 to 8.6.0.21, 8.7.0.0 to 8.10.0.7, 8.11.0.0 to 8.11.1.1, and 10.4.0.0 to 10.4.0.2 are affected by CVE-2023-35974.
How do I fix CVE-2023-35974?
Users are advised to upgrade to a patched version of ArubaOS and follow the recommendations provided by Aruba Networks.
Where can I find more information about CVE-2023-35974?
More information about CVE-2023-35974 can be found at the following reference link: [Aruba Networks Advisory](https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-008.txt).