An authenticated remote code execution vulnerability
exists in the AOS-CX Network Analytics Engine. Successful
exploitation of this vulnerability results in the ability to
execute arbitrary code as a privileged user on the underlying
operating system, leading to a complete compromise of the
switch running AOS-CX.
References
| Link | Resource |
|---|---|
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-004.txt | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Nov 2023, 04:02
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX. |
29 Mar 2023, 13:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:hpe:aruba_cx_8320-48p:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8360-12c:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8360-48y6c:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8400:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8325-32c:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8360-24xf2c:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8360-16y2c:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8360-32y4c:-:*:*:*:*:*:*:* cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8320-32:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_6200m_24g:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8360-48xt4c:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_6300m_48g:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_9300_32d:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_6200f_48g:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_6300m_24p:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_6410:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_8325-48y8c:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_10000-48y6:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_6405:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-004.txt - Vendor Advisory | |
| First Time |
Hpe aruba Cx 8325-32c
Hpe Hpe aruba Cx 6300m 48g Hpe aruba Cx 10000-48y6 Hpe aruba Cx 8360-48y6c Hpe aruba Cx 8325-48y8c Hpe aruba Cx 8360-48xt4c Hpe aruba Cx 6410 Hpe aruba Cx 8360-32y4c Hpe arubaos-cx Hpe aruba Cx 6200m 24g Hpe aruba Cx 8360-12c Hpe aruba Cx 8320-32 Hpe aruba Cx 9300 32d Hpe aruba Cx 6300m 24p Hpe aruba Cx 8360-24xf2c Hpe aruba Cx 8400 Hpe aruba Cx 8320-48p Hpe aruba Cx 8360-16y2c Hpe aruba Cx 6200f 48g Hpe aruba Cx 6405 |
22 Mar 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-22 06:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-1168
Mitre link : CVE-2023-1168
CVE.ORG link : CVE-2023-1168
JSON object : View
Products Affected
hpe
- aruba_cx_8325-48y8c
- aruba_cx_8320-48p
- aruba_cx_6200f_48g
- aruba_cx_9300_32d
- aruba_cx_8360-16y2c
- aruba_cx_8325-32c
- aruba_cx_8360-48y6c
- aruba_cx_8320-32
- aruba_cx_8360-12c
- aruba_cx_8360-48xt4c
- aruba_cx_8400
- aruba_cx_6300m_48g
- aruba_cx_8360-32y4c
- aruba_cx_6410
- aruba_cx_6200m_24g
- arubaos-cx
- aruba_cx_10000-48y6
- aruba_cx_6405
- aruba_cx_6300m_24p
- aruba_cx_8360-24xf2c
CWE