Vulnerability Description
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version(s): AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.06.xxxx: 10.06.0180 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Aos-Cx | >= 10.06.0000, < 10.06.0220 |
| Arubanetworks | Cx 10000 | - |
| Arubanetworks | Cx 8325 | - |
| Arubanetworks | Cx 8320 | - |
| Arubanetworks | Cx 9300 | - |
| Arubanetworks | Cx 8360 | - |
| Arubanetworks | Cx 6400 | - |
| Arubanetworks | Cx 6300 | - |
| Arubanetworks | Cx 6200F | - |
| Arubanetworks | Cx 6100 | - |
| Arubanetworks | Cx 6000 | - |
| Arubanetworks | Cx 4100I | - |
| Arubanetworks | Cx 8400 | - |
Related Weaknesses (CWE)
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txtVendor Advisory
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txtVendor Advisory
FAQ
What is CVE-2022-23682?
CVE-2022-23682 is a vulnerability with a CVSS score of 7.8 (HIGH). Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as ro...
How severe is CVE-2022-23682?
CVE-2022-23682 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-23682?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Aos-Cx, Arubanetworks Cx 10000, Arubanetworks Cx 8325, Arubanetworks Cx 8320, Arubanetworks Cx 9300.