VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 5, 2023· Updated Dec 4, 2024

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

CVE-2023-35973

Description

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Affected products

2
  • Arubanetworks/Arubaosllm-fuzzy
  • Hewlett Packard Enterprise (HPE)/Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Centralv5
    Range: - ArubaOS 10.4.x.x: 10.4.0.1 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.