CVE-2023-39268: Memory Corruption Vulnerability in ArubaOS-Switch
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-39268?
The severity of CVE-2023-39268 is critical with a score of 9.8.
How does the vulnerability in ArubaOS-Switch impact the system?
The vulnerability in ArubaOS-Switch can lead to unauthenticated remote code execution, allowing an attacker to execute arbitrary code as a privileged user on the underlying operating system.
What software versions are affected by CVE-2023-39268?
The affected software versions include Hpe Arubaos-switch up to but not including version a.15.16.0026, versions between 16.01.0000 and 16.04.0027, versions between 16.05.0000 and 16.08.0027, versions between 16.10.0001 and 16.10.0024, and versions between 16.11.0001 and 16.11.0013.
How can I fix the vulnerability in ArubaOS-Switch?
To fix the vulnerability in ArubaOS-Switch, it is recommended to upgrade to a version that is not vulnerable.
Where can I find more information about CVE-2023-39268?
More information about CVE-2023-39268 can be found at the following reference: [https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt](https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt).