CVE-2022-23676
A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - security-alert@hpe.com
- Published
- 2022-05-10
- Last modified
- 2024-08-03
- Weaknesses
- CWE-787
Affected products
- 2530 Firmware (Arubanetworks)
- 2540 Firmware (Arubanetworks)
- 2615 Firmware (Arubanetworks)
- 2620 Firmware (Arubanetworks)
- 2915 Firmware (Arubanetworks)
- 2920 Firmware (Arubanetworks)
- 2930f Firmware (Arubanetworks)
- 2930m Firmware (Arubanetworks)
- 3810m Firmware (Arubanetworks)
- 5406r Firmware (Arubanetworks)
- 5412r Firmware (Arubanetworks)
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-008.txt
