PT-2023-2096 · Aruba · Arubaos

Published 2023-02-28 · Updated 2025-03-07 · CVE-2023-22775

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ArubaOS (affected versions not specified)

Description A vulnerability in the command line interface of ArubaOS is related to insufficient restrictions of the system's controlled area. This issue allows an authenticated attacker to access sensitive information, potentially gaining access to data beyond what is authorized by the user's existing privilege level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

BDU:2023-01830

CVE-2023-22775

Affected Products

Arubaos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-22775 · Security Note
• https://bdu.fstec.ru/vul/2023-01830 · Security Note
• https://osv.dev/vulnerability/CVE-2023-22775 · Vendor Advisory
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt · Vendor Advisory
• https://t.me/cibsecurity/59213 · Telegram Post
• https://t.me/cvenotify/113946 · Telegram Post