Known vulnerabilities in Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-22772 | An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface | 6.5 Medium | Feb 28, 2023 |
| CVE-2023-22771 | An insufficient session expiration vulnerability exists in the ArubaOS command line interface | 6.8 Medium | Feb 28, 2023 |
| CVE-2023-22770 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22769 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22768 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22767 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22766 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22765 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22764 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22763 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22762 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22761 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22760 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22759 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22758 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface | 7.2 High | Feb 28, 2023 |
| CVE-2023-22757 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to… | 8.1 High | Feb 28, 2023 |
| CVE-2023-22756 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to… | 8.1 High | Feb 28, 2023 |
| CVE-2023-22755 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to… | 8.1 High | Feb 28, 2023 |
| CVE-2023-22754 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to… | 8.1 High | Feb 28, 2023 |
| CVE-2023-22753 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to… | 8.1 High | Feb 28, 2023 |
| CVE-2023-22752 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by… | 9.8 Critical | Feb 28, 2023 |
| CVE-2023-22751 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by… | 9.8 Critical | Feb 28, 2023 |
| CVE-2023-22750 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending… | 9.8 Critical | Feb 28, 2023 |
| CVE-2023-22749 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending… | 9.8 Critical | Feb 28, 2023 |
| CVE-2023-22748 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending… | 9.8 Critical | Feb 28, 2023 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18