DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Aruba ArubaOS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-05-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
beschreibt (13)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-22791US | medium4.8 | — | ||
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing val… | ||||
| CVE-2023-22790US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result… | ||||
| CVE-2023-22789US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result… | ||||
| CVE-2023-22788US | high8.8 | — | ||
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result… | ||||
| CVE-2023-22787US | high7.5 | — | ||
An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of t… | ||||
| CVE-2023-22786US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22785US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22784US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22783US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22782US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22781US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22780US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2023-22779US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
- NIST Database vom 2023-05-08external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan