CVE-2023-3718

Опубликовано: 01 авг. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker to fully compromise the underlying operating system on the device running AOS-CX.

Ссылки

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-010.txt
Mitigation
Vendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-010.txt
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*

Версия от 10.10.0000 (включая) до 10.10.1050 (включая)

cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*

Версия от 10.11.0000 (включая) до 10.11.1010 (включая)

Одно из

cpe:2.3:h:hpe:aruba_cx_10000-48y6:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_4100i:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6000_12g:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6000_24g:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6000_48g:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6100:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6200f:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6200f_48g:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6200m:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6200m_24g:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6300m_24p:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6300m_48g:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6405:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_6410:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8320-32:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8320-48p:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8325-32c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8325-48y8c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8360-12c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8360-16y2c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8360-24xf2c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8360-32y4c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8360-48xt4c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8360-48y6c:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_8400:-:*:*:*:*:*:*:*

cpe:2.3:h:hpe:aruba_cx_9300_32d:-:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01103

Низкий

8.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

GHSA-jmx3-98vw-w6hq