CVE-2023-22762

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22767

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22766

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22765

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22764

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22763

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22776

Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22774

Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22773

Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22768

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22769

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22770

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-22771

Insufficient Session Expiration in ArubaOS Command Line Interface

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

7010 7030 7205 and 21 more

CVE-2023-35972

Authenticated Remote Command Execution in ArubaOS Web-based Management Interface

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed

Vendors

Arubanetworks

Products

Arubaos Mc-va-10 Mc-va-1k and 11 more

CVE-2023-35973

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Arubanetworks

Products

Arubaos Mc-va-10 Mc-va-1k and 11 more

CVE-2023-35974

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Arubanetworks

Products

Arubaos Mc-va-10 Mc-va-1k and 11 more

CVE-2023-35975

Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

Arubaos Mc-va-10 Mc-va-1k and 11 more

CVE-2023-35976

Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

Arubaos Mc-va-10 Mc-va-1k and 11 more

CVE-2023-35977

Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

Arubaos Mc-va-10 Mc-va-1k and 11 more

CVE-2023-35979

Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface

There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Arubanetworks

Products

Arubaos Mc-va-10 Mc-va-1k and 11 more