Description
An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise | ArubaOS-Switch | ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0012 and below., ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC.16.10.0025 and below., ArubaOS-Switch 16.10.xxxx: WB.16.10.23 and below., ArubaOS-Switch 16.09.xxxx: All versions., ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0026 and below., ArubaOS-… | — |
Advisories 1
- WID-SEC-2023-2203 Aruba Switch: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 30, 2023