PT-2023-2091 · Aruba · Arubaos

CVE-2023-22770

·

Publicado

2023-02-28

·

Atualizado

2023-03-04

CVSS v2.0

8.5

Alta

VetorAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ArubaOS (affected versions not specified)
Description The issue is related to the command line interface of ArubaOS, where a lack of data sanitization on the management level can be exploited. This allows a remote attacker to execute arbitrary commands. Successful exploitation results in the ability to execute commands as a privileged user on the underlying operating system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-01825
CVE-2023-22770

Produtos afetados

Arubaos