VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 28, 2023· Updated Mar 7, 2025

Insufficient Session Expiration in ArubaOS Command Line Interface

CVE-2023-22771

Description

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account

Affected products

2
  • Arubanetworks/ArubaOS-CXllm-fuzzy
  • Hewlett Packard Enterprise (HPE)/Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Centralv5
    Range: ArubaOS 8.6.x.x: 8.6.0.19 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.