CVE-2023-39268
MediumCVSS 4.5Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
CVE-2023-39268 in ArubaOS-Switch is a memory corruption vulnerability that could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation allows arbitrary code execution as a privileged user on the underlying operating system.
Risk Assessment
Exploitation of this vulnerability could lead to system takeover, posing a serious security threat to the organization. Attackers may gain access to sensitive data and resources.
Recommendation
It is recommended to immediately update ArubaOS-Switch to the latest version to mitigate this vulnerability. Additionally, monitoring network traffic for suspicious packets can help secure the system.
Original NVD description (English source)
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.