CVE-2023-35972: falha de alta gravidade em Hewlett Packard Enterprise (HPE) Aruba…
Authenticated Remote Command Execution in ArubaOS Web-based Management Interface
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Aruba Mobility Conductor; Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.6%
An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVEs relacionadas — Hewlett Packard Enterprise (HPE) Aruba…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-26304CRITICALCVE-2024-26304EPSS 44.3%CVE-2024-26305CRITICALCVE-2024-26305EPSS 15.2%CVE-2024-33512CRITICALCVE-2024-33512EPSS 14.6%CVE-2024-33511CRITICALCVE-2024-33511EPSS 14.6%CVE-2023-22750CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22749CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%