CVE-2022-23677
A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch…
Impact
A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | 5406r Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 before 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 2920 Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 2930f Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 through 16.09.0020 from 16.10.0 through 16.10.0020 |
| Arubanetworks | 2930m Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 2530 Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 2540 Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 5412r Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 2615 Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 2620 Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 2915 Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |
| Arubanetworks | 3810m Firmware | from 15.00.0 through 15.16.0023 from 16.01.0 before 16.02.0034 from 16.03.0 through 16.04.0024 from 16.05.0 before 16.08.0025 from 16.09.0 before 16.09.0020 from 16.10.0 before 16.10.0020 |