CVE-2023-45626mediumCWE-863

CVE-2023-45626: medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Aruba Access…

Published · Updated

Follow this CVE+ Monitor Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.9%
An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
Affected products
Hewlett Packard Enterprise (HPE) · Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
Related CVEs — Hewlett Packard Enterprise (HPE) Aruba Access…

In the same product, most dangerous first.

CVE-2023-45616CRITICALCVE-2023-45616EPSS 2.1%CVE-2023-45615CRITICALCVE-2023-45615EPSS 2.1%CVE-2023-45614CRITICALCVE-2023-45614EPSS 2.1%CVE-2023-45625HIGHCVE-2023-45625EPSS 1.8%CVE-2023-45624HIGHCVE-2023-45624EPSS 0.9%CVE-2023-45623HIGHCVE-2023-45623EPSS 0.9%