DeutschShown in its original language — a full translation is planned for a future version.
Aruba ArubaOS: Mehrere Schwachstellen
view advisory published 2023-07-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-35979US | high7.5 | — | ||
There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability resul… | ||||
| CVE-2023-35978US | medium6.1 | — | ||
A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interf… | ||||
| CVE-2023-35977US | medium6.5 | — | ||
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to dat… | ||||
| CVE-2023-35976US | medium6.5 | — | ||
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to dat… | ||||
| CVE-2023-35975US | high8.1 | — | ||
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary… | ||||
| CVE-2023-35974US | high7.2 | — | ||
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbit… | ||||
| CVE-2023-35973US | high7.2 | — | ||
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbit… | ||||
| CVE-2023-35972US | high7.2 | — | ||
An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability t… | ||||
| CVE-2023-35971US | medium6.1 | — | ||
A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan