CVE-2022-23688

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-23688
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*
History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-400 NVD-CWE-noinfo

12 Sep 2022, 14:24

Type Values Removed Values Added
CWE CWE-400
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3
First Time Arubanetworks cx 6000
Arubanetworks cx 6400
Arubanetworks cx 8360
Arubanetworks cx 4100i
Arubanetworks
Arubanetworks cx 8400
Arubanetworks cx 6300
Arubanetworks cx 10000
Arubanetworks cx 8320
Arubanetworks cx 8325
Arubanetworks cx 9300
Arubanetworks aos-cx
Arubanetworks cx 6200f
Arubanetworks cx 6100
References (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt - (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt - Vendor Advisory
CPE cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*

06 Sep 2022, 18:50

Type Values Removed Values Added
New CVE
Information

Published : 2022-09-06 18:15

Updated : 2023-12-10 14:35

NVD link : CVE-2022-23688

Mitre link : CVE-2022-23688

CVE.ORG link : CVE-2022-23688

JSON object : View

Products Affected

arubanetworks

  • cx_8360
  • cx_6200f
  • cx_6400
  • cx_6300
  • cx_6000
  • cx_8320
  • cx_9300
  • cx_4100i
  • cx_8400
  • cx_8325
  • cx_6100
  • cx_10000
  • aos-cx
CWE
NVD-CWE-noinfo