Aruba AOS-10: CVE-2023-22761: Authenticated Remote Command Execution in ArubaOS Web-based Management Interface

Aruba AOS-10: CVE-2023-22761: Authenticated Remote Command Execution in ArubaOS Web-based Management Interface

Severity

8

CVSS

(AV:N/AC:L/Au:M/C:C/I:C/A:C)

Published

02/28/2023

Created

01/16/2025

Added

01/14/2025

Modified

02/04/2025

Description

Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.

Solution(s)

• aruba-aos-10-cve-2023-22761

References

• https://attackerkb.com/topics/cve-2023-22761
• CVE - 2023-22761
• https://csaf.arubanetworks.com/2023/hpe_aruba_networking_-_2023-002.json