CVE-2023-35976: Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
Published Jul 5, 2023
·Updated
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.
Affected Software
34 affected components
Arubanetworks Arubaos>=6.5.4.0<8.6.0.21
Arubanetworks Arubaos>=8.7.0.0<8.10.0.7
Arubanetworks Arubaos>=8.11.0.0<8.11.1.1
Arubanetworks Arubaos>=10.4.0.0<10.4.0.2
Arubanetworks Mc-va-10
Arubanetworks Mc-va-1k
Arubanetworks Mc-va-250
Arubanetworks Mc-va-50
Arubanetworks Mcr-va-10k
Arubanetworks Mcr-va-1k
Arubanetworks Mcr-va-50
Arubanetworks Mcr-va-500
Arubanetworks Mcr-va-5k
Arubanetworks Sd-wan
Arubanetworks Mcr-hw-10k
Arubanetworks Mcr-hw-1k
Arubanetworks Mcr-hw-5k
All of the following
Any of the following
Arubanetworks Arubaos>=6.5.4.0<8.6.0.21
Arubanetworks Arubaos>=8.7.0.0<8.10.0.7
Arubanetworks Arubaos>=8.11.0.0<8.11.1.1
Arubanetworks Arubaos>=10.4.0.0<10.4.0.2
Any of the following
Arubanetworks Mc-va-10
Arubanetworks Mc-va-1k
Arubanetworks Mc-va-250
Arubanetworks Mc-va-50
Arubanetworks Mcr-va-10k
Arubanetworks Mcr-va-1k
Arubanetworks Mcr-va-50
Arubanetworks Mcr-va-500
Arubanetworks Mcr-va-5k
Arubanetworks Sd-wan
Arubanetworks Mcr-hw-10k
Arubanetworks Mcr-hw-1k
Arubanetworks Mcr-hw-5k
Event History
Jul 5, 2023
CVE Published
via MITRE·02:47 PM
Data Sourced
via MITRE·02:47 PM
DescriptionSeverity
Data Sourced
via NVD·03:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2023-35976.
2
What is the severity level of CVE-2023-35976?
The severity level of CVE-2023-35976 is medium.
3
How does this vulnerability allow access to sensitive information?
This vulnerability allows an authenticated attacker to access sensitive information on the ArubaOS command line interface.
4
Which versions of ArubaOS are affected by this vulnerability?
Versions 6.5.4.0 to 8.6.0.21, 8.7.0.0 to 8.10.0.7, 8.11.0.0 to 8.11.1.1, and 10.4.0.0 to 10.4.0.2 of ArubaOS are affected by this vulnerability.
5
How can I fix CVE-2023-35976?
To fix CVE-2023-35976, it is recommended to apply the necessary security patches provided by Aruba Networks.