DeutschShown in its original language — a full translation is planned for a future version.
Aruba ArubaOS: Mehrere Schwachstellen
view advisory published 2023-05-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-22791US | medium4.8 | — | ||
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing val… | ||||
| CVE-2023-22790US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result… | ||||
| CVE-2023-22789US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result… | ||||
| CVE-2023-22788US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result… | ||||
| CVE-2023-22787US | high7.5 | — | ||
An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of t… | ||||
| CVE-2023-22786US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22785US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22784US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22783US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22782US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22781US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22780US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22779US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
02
references
External citations — patches, advisories, analysis.
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan