CVE-2023-39267
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
An authenticated remote code execution vulnerability exists in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.
Risk Assessment
The organization may experience service outages, leading to significant disruptions in operations.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor systems for potential exploitation attempts.
Other vulnerabilities in ArubaOS-Switch
See all- CVE-2023-39268Medium
CVE-2023-39268 in ArubaOS-Switch is a memory corruption vulnerability that could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation allows arbitrary code execution as a privileged user on the underlying operating system.
- CVE-2023-39266High
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Original NVD description (English source)
An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS