DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Aruba ArubaOS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-11-14
Ein entfernter Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Code mit administrativen Rechten auszuführen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45627US | medium6.5 | — | ||
An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in the ability to interrupt the normal
oper… | ||||
| CVE-2023-45626US | high7.2OT erhöht | — | ||
An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles.
| ||||
| CVE-2023-45625US | high7.2 | — | ||
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbi… | ||||
| CVE-2023-45624US | high7.5 | — | ||
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the a… | ||||
| CVE-2023-45623US | high7.5 | — | ||
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in… | ||||
| CVE-2023-45622US | high7.5 | — | ||
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in t… | ||||
| CVE-2023-45621US | high7.5 | — | ||
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the abil… | ||||
| CVE-2023-45620US | high7.5 | — | ||
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the abil… | ||||
| CVE-2023-45619US | high8.2 | — | ||
There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability res… | ||||
| CVE-2023-45618US | high8.2 | — | ||
There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulner… | ||||
| CVE-2023-45617US | high8.2 | — | ||
There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities r… | ||||
| CVE-2023-45616US | critical9.8 | — | ||
There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets dest… | ||||
| CVE-2023-45615US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to th… | ||||
| CVE-2023-45614US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan