An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker to fully compromise the underlying operating system on the device running AOS-CX.
References
| Link | Resource |
|---|---|
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-010.txt | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2023-08-01 19:15
Updated : 2023-08-08 17:08
NVD link : CVE-2023-3718
Mitre link : CVE-2023-3718
CVE.ORG link : CVE-2023-3718
JSON object : View
Products Affected
hpe
- aruba_cx_6000_24g
- aruba_cx_6405
- aruba_cx_8360-32y4c
- aruba_cx_8400
- aruba_cx_6200m
- aruba_cx_8320-32
- aruba_cx_6000_12g
- aruba_cx_8325-48y8c
- aruba_cx_8360-12c
- arubaos-cx
- aruba_cx_8360-24xf2c
- aruba_cx_6200m_24g
- aruba_cx_6200f
- aruba_cx_8325-32c
- aruba_cx_6410
- aruba_cx_6200f_48g
- aruba_cx_6300m_48g
- aruba_cx_8320-48p
- aruba_cx_9300_32d
- aruba_cx_6100
- aruba_cx_8360-48xt4c
- aruba_cx_10000-48y6
- aruba_cx_8360-48y6c
- aruba_cx_8360-16y2c
- aruba_cx_4100i
- aruba_cx_6300m_24p
- aruba_cx_6000_48g
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')