NetSight
high7.2

CVE-2023-22789

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface.

Impact

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Affected products

VendorProductAffected versions
ArubanetworksArubaos
from 10.3.0.0 through 10.3.1.0
HpInstantos
from 6.4.0.0 through 6.4.4.8-4.2.4.20
from 6.5.0.0 through 6.5.4.23
from 8.4.0.0 before 8.6.0.0
from 8.6.0.0 through 8.6.0.19
from 8.7.0.0 through 8.9.0.0
from 8.10.0.0 through 8.10.0.4

Weakness classification

References