VYPR
← All advisories
High severity7.8NVD Advisory· Published Jan 5, 2023· Updated Jun 17, 2026

CVE-2022-43535

CVE-2022-43535

Description

A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Affected products

3
  • Arubanetworks/ClearPass Policy Manager2 versions
    cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*range: >=6.9.0,<6.9.12
    • (no CPE)range: 6.10.x <= 6.10.7, 6.9.x <= 6.9.12
  • Hewlett Packard Enterprise (HPE)/Aruba ClearPass Policy Managerv5
    Range: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.