NetSight
high7.2

CVE-2023-1168

An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine.

Impact

An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX.

Affected products

VendorProductAffected versions
HpeArubaos-Cx
from 10.06.0000 before 10.06.0240
from 10.08.0000 through 10.08.1070
from 10.09.0000 through 10.09.1020
from 10.10.0000 before 10.10.1030

Weakness classification

References