VulnerabilityModified

CVE-2023-22774

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface.

MEDIUM 6.5EPSS 0.77%

Does this matter?

Lower severity and a low EPSS score (0.77%). Track it; it rarely justifies an emergency change on its own.

Description

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
EPSS: 0.77% probability · 53th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: arubanetworks/arubaos · arubanetworks/sd-wan
Source: security-alert@hpe.com

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txtVendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txtVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.