DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Aruba ArubaOS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-07-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-35979US | high7.5 | — | ||
There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability resul… | ||||
| CVE-2023-35978US | medium6.1 | — | ||
A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interf… | ||||
| CVE-2023-35977US | medium6.5 | — | ||
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to dat… | ||||
| CVE-2023-35976US | medium6.5 | — | ||
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to dat… | ||||
| CVE-2023-35975US | high8.1 | — | ||
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary… | ||||
| CVE-2023-35974US | high7.2 | — | ||
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbit… | ||||
| CVE-2023-35973US | high7.2 | — | ||
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbit… | ||||
| CVE-2023-35972US | high7.2 | — | ||
An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability t… | ||||
| CVE-2023-35971US | medium6.1 | — | ||
A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
- GitHub Advisory Databaseexternal
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan