Skip to content
Sign in
7.2 High

CVE-2023-22761 Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface

Description

Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.

Affected products and versions

Product Affected versions Fixed in
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central Versions not published

Other CVEs of Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

The 51 CVEs of Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central →
CVE-2024-33518 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via… 5.3 Medium CVE-2024-33517 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via… 5.3 Medium CVE-2024-33516 An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol… 5.3 Medium CVE-2024-33515 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI… 5.3 Medium
Track this CVE