VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 1, 2023· Updated Jun 17, 2026

CVE-2023-22772

CVE-2023-22772

Description

An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.

Affected products

4
  • Arubanetworks/Arubaosllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=8.6.0.0,<=8.6.0.19
  • Arubanetworks/Sd Wan
    cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*
    Range: >=8.7.0.0-2.3.0.0,<=8.7.0.0-2.3.0.8
  • Hewlett Packard Enterprise (HPE)/Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Centralv5
    Range: ArubaOS 8.6.x.x: 8.6.0.19 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.