Back to feed
EUVD-2023-26886 · Published Mar 1, 2023
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Technologies
Arubanetworks Mcr-Hw-1KArubanetworks 9004-LteArubanetworks 7030Arubanetworks Mcr-Va-10KArubanetworks 7210Arubanetworks 7240XmArubanetworks Mc-Va-10Arubanetworks Mcr-Va-500Arubanetworks 7205Arubanetworks 9004Arubanetworks 7280Arubanetworks Mcr-Va-5KArubanetworks Mcr-Va-50Arubanetworks Sd-WanArubanetworks Mc-Va-250Arubanetworks Mc-Va-1KArubanetworks 9012Arubanetworks Mcr-Hw-10KArubanetworks Mc-Va-50Arubanetworks 7010Arubanetworks Mcr-Va-1KArubanetworks 7220Arubanetworks ArubaosArubanetworks Mcr-Hw-5K
Weaknesses
CWE-77
CVSS scores
- v3.17.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
