CVE-2023-22775mediumCWE-668

CVE-2023-22775: fallo de gravedad media en Hewlett Packard Enterprise (HPE) Aruba…

Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Aruba Mobility Conductor; Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.6%
A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
CVEs relacionadas — Hewlett Packard Enterprise (HPE) Aruba…

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-26304CRITICALCVE-2024-26304EPSS 44.3%CVE-2024-26305CRITICALCVE-2024-26305EPSS 15.2%CVE-2024-33512CRITICALCVE-2024-33512EPSS 14.6%CVE-2024-33511CRITICALCVE-2024-33511EPSS 14.6%CVE-2023-22750CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22749CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%