VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 1, 2023· Updated Jun 17, 2026

CVE-2023-22772

CVE-2023-22772

Description

An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.

Affected products

4
  • Hewlett Packard Enterprise (HPE)/Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Centralv5
    Range: ArubaOS 8.6.x.x: 8.6.0.19 and below
  • Arubanetworks/Sd Wan
    cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*
    Range: >=8.7.0.0-2.3.0.0,<=8.7.0.0-2.3.0.8
  • Arubanetworks/Arubaos2 versions
    cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=8.6.0.0,<=8.6.0.19
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.