medium4.5
CVE-2023-39268
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets.
Impact
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hpe | Arubaos-Switch | before a.15.16.0026 from 16.01.0000 before 16.04.0027 from 16.05.0000 before 16.08.0027 from 16.10.0001 before 16.10.0024 from 16.11.0001 before 16.11.0013 |