Description
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise | ArubaOS-Switch | ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0012 and below., ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC.16.10.0025 and below., ArubaOS-Switch 16.10.xxxx: WB.16.10.23 and below., ArubaOS-Switch 16.09.xxxx: All versions., ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0026 and below., ArubaOS-… | — |
Advisories 1
- WID-SEC-2023-2203 Aruba Switch: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 30, 2023