Description
An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker to fully compromise the underlying operating system on the device running AOS-CX.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | Aruba CX Switches | AOS-CX 10.11.xxxx: 10.11.1010 and below, AOS-CX 10.10.xxxx: 10.10.1050 and below | — |
Advisories 1
- WID-SEC-2023-1939 Aruba Switch: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · Aug 1, 2023