CVE-2023-22775: falha de média gravidade em Hewlett Packard Enterprise (HPE) Aruba…
Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Aruba Mobility Conductor; Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.6%
A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVEs relacionadas — Hewlett Packard Enterprise (HPE) Aruba…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-26304CRITICALCVE-2024-26304EPSS 44.3%CVE-2024-26305CRITICALCVE-2024-26305EPSS 15.2%CVE-2024-33512CRITICALCVE-2024-33512EPSS 14.6%CVE-2024-33511CRITICALCVE-2024-33511EPSS 14.6%CVE-2023-22750CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22749CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%