CVE-2023-3718
01.08.2023, 19:15
An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker to fully compromise the underlying operating system on the device running AOS-CX.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| hpe | arubaos-cx | 10.10.0000 ≤ 𝑥 ≤ 10.10.1050 |
| hpe | arubaos-cx | 10.11.0000 ≤ 𝑥 ≤ 10.11.1010 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| hewlett_packard_enterprise | aruba_cx_switches | 10.11 ≤ 𝑥 ≤ 10.11.1010 | ADP |
| hewlett_packard_enterprise | aruba_cx_switches | 10.10 ≤ 𝑥 ≤ 10.10.1050 | ADP |