Skip to content
OpenAdvisories
High WID-SEC-2023-1939 1 CVE

Aruba Switch: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten

Published Aug 1, 2023 · Updated Aug 1, 2023 · de-DE

Vendor: Aruba Product: Switch Product: Switch Aruba CX 10000 Switch Series Product: Switch Aruba CX 4100i Switch Series Product: Switch Aruba CX 6000 Switch Series Product: Switch Aruba CX 6100 Switch Series Product: Switch Aruba CX 6200 Switch Series Product: Switch Aruba CX 6300 Switch Series Product: Switch Aruba CX 6400 Switch Series Product: Switch Aruba CX 8320 Switch Series Product: Switch Aruba CX 8325 Switch Series Product: Switch Aruba CX 8360 Switch Series Product: Switch Aruba CX 8400 Switch Series Product: Switch Aruba CX 9300 Switch Series

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Aruba Switch ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

Product

Ein Switch ist ein aktives Netzwerkgerät, das Datenpakete auf dem Data Link Layer (Layer 2) des OSI-Modells weiterleitet.

Vulnerabilities 1

  • High 8.8
    CVE-2023-3718

    Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface

    An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the aff…

    Hewlett Packard Enterprise (HPE) Aruba CX Switches

Revision history

  1. #1

    Initiale Fassung

References