CVE-2023-22788

EUVD-2023-26906
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
hpeCNA
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
arubanetworksarubaos
10.3.0.0 ≤
𝑥
≤ 10.3.1.0
hpinstantos
6.4.0.0 ≤
𝑥
≤ 6.4.4.8-4.2.4.20
hpinstantos
6.5.0.0 ≤
𝑥
≤ 6.5.4.23
hpinstantos
8.4.0.0 ≤
𝑥
< 8.6.0.0
hpinstantos
8.6.0.0 ≤
𝑥
≤ 8.6.0.19
hpinstantos
8.7.0.0 ≤
𝑥
≤ 8.9.0.0
hpinstantos
8.10.0.0 ≤
𝑥
≤ 8.10.0.4
𝑥
= Vulnerable software versions