Vulnerability Description
There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Arubaos | >= 10.3.0.0, < 10.4.0.3 |
| Hp | Instantos | >= 6.4.0.0, < 8.6.0.23 |
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txtMitigationVendor Advisory
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txtMitigationVendor Advisory
FAQ
What is CVE-2023-45618?
CVE-2023-45618 is a vulnerability with a CVSS score of 8.2 (HIGH). There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in ...
How severe is CVE-2023-45618?
CVE-2023-45618 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-45618?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Arubaos, Hp Instantos.