CVE-2023-22759

Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.

Score

CVSS 3.1 7.2 High

Status

Modified - security-alert@hpe.com

Published

2023-03-01

Last modified

2025-03-07

Weaknesses

CWE-77

Affected products

• Arubaos (Arubanetworks)
• Sd-wan (Arubanetworks)
• Aruba Mobility Conductor Formerly Mobility Master Aruba Mobility Controllers Wlan Gateways And Sd-wan Gateways Managed By Aruba Central (Hewlett Packard Enterprise Hpe)

References

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt