CVE-2023-35977: Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
First published: Wed Jul 05 2023(Updated: )
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arubanetworks Arubaos | >=6.5.4.0<8.6.0.21 | |
| Arubanetworks Arubaos | >=8.7.0.0<8.10.0.7 | |
| Arubanetworks Arubaos | >=8.11.0.0<8.11.1.1 | |
| Arubanetworks Arubaos | >=10.4.0.0<10.4.0.2 | |
| Arubanetworks Mc-va-10 | ||
| Arubanetworks Mc-va-1k | ||
| Arubanetworks Mc-va-250 | ||
| Arubanetworks Mc-va-50 | ||
| Arubanetworks Mcr-va-10k | ||
| Arubanetworks Mcr-va-1k | ||
| Arubanetworks Mcr-va-50 | ||
| Arubanetworks Mcr-va-500 | ||
| Arubanetworks Mcr-va-5k | ||
| Arubanetworks Sd-wan | ||
| Arubanetworks Mcr-hw-10k | ||
| Arubanetworks Mcr-hw-1k | ||
| Arubanetworks Mcr-hw-5k |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2023-35977.
What is the severity of CVE-2023-35977?
The severity of CVE-2023-35977 is medium.
What is the affected software?
The affected software includes ArubaOS versions 6.5.4.0 to 8.6.0.21, 8.7.0.0 to 8.10.0.7, 8.11.0.0 to 8.11.1.1, and 10.4.0.0 to 10.4.0.2.
What is the impact of CVE-2023-35977?
Successful exploitation of CVE-2023-35977 could allow an authenticated attacker to access sensitive information beyond their authorized privilege level.
Is there any official reference for CVE-2023-35977?
Yes, you can find more information about CVE-2023-35977 in the official Aruba Networks security advisory: [ARUBA-PSA-2023-008.txt](https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-008.txt).
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/title
- agent/last-modified-date
- agent/references
- agent/first-publish-date
- agent/tags
- agent/description
- agent/event
- vendor/arubanetworks
- canonical/arubanetworks arubaos
- version/arubanetworks arubaos/6.5.4.0
- version/arubanetworks arubaos/8.7.0.0
- version/arubanetworks arubaos/8.11.0.0
- version/arubanetworks arubaos/10.4.0.0
- canonical/arubanetworks mc-va-10
- canonical/arubanetworks mc-va-1k
- canonical/arubanetworks mc-va-250
- canonical/arubanetworks mc-va-50
- canonical/arubanetworks mcr-va-10k
- canonical/arubanetworks mcr-va-1k
- canonical/arubanetworks mcr-va-50
- canonical/arubanetworks mcr-va-500
- canonical/arubanetworks mcr-va-5k
- canonical/arubanetworks sd-wan
- canonical/arubanetworks mcr-hw-10k
- canonical/arubanetworks mcr-hw-1k
- canonical/arubanetworks mcr-hw-5k