CVE-2023-39267: Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface
Published Aug 29, 2023
·Updated
An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.
Affected Software
15 affected components
HPE Arubaos-switch<a.15.16.0026
HPE Arubaos-switch>=16.01.0000<16.04.0027
HPE Arubaos-switch>=16.05.0000<16.08.0027
HPE Arubaos-switch>=16.10.0001<16.10.0024
HPE Arubaos-switch>=16.11.0001<16.11.0013
Arubanetworks Aruba 2530
Arubanetworks Aruba 2530ya
Arubanetworks Aruba 2530yb
Arubanetworks Aruba 2540
Arubanetworks Aruba 2920
Arubanetworks Aruba 2930f
Arubanetworks Aruba 2930m
Arubanetworks Aruba 3810m
Arubanetworks Aruba 5406r Zl2
Arubanetworks Aruba 5412r Zl2
Event History
Aug 29, 2023
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the vulnerability ID for this ArubaOS-Switch vulnerability?
The vulnerability ID for this ArubaOS-Switch vulnerability is CVE-2023-39267.
2
What is the severity of CVE-2023-39267?
The severity of CVE-2023-39267 is medium with a CVSS score of 6.6.
3
What is the affected software for CVE-2023-39267?
The affected software for CVE-2023-39267 is ArubaOS-Switch versions a.15.16.0026 to 16.11.0013.
4
What is the impact of exploiting CVE-2023-39267?
Exploiting CVE-2023-39267 can result in a Denial-of-Service (DoS) condition in the ArubaOS-Switch.
5
Is Arubanetworks Aruba 2530 vulnerable to CVE-2023-39267?
No, Arubanetworks Aruba 2530 is not vulnerable to CVE-2023-39267.