Orta CVSS 5.5
CVE-2022-37911: Sd-wan: XML dış varlık (XXE)
Açıklama (NVD)
Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition.
Özet bilgiler
- Ürün
- Arubanetworks Sd-wan
- CVSS v3.1
- 5.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H - EPSS
- %0,67 (yüzdelik 52)
- CWE
- CWE-611
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| arubanetworks-sd-wan | 8.5.0.0-2.1.0.0 | — | 8.7.0.0-2.3.0.7 |
| arubanetworks-arubaos | 6.5.4.0 | — | 6.5.4.23 |
| arubanetworks-arubaos | 8.4.0.0 | — | 8.6.0.18 |
| arubanetworks-arubaos | 8.7.0.0 | — | 8.7.1.10 |
| arubanetworks-arubaos | 8.8.0.0 | — | 8.10.0.0 |
| arubanetworks-arubaos | 10.3.0.0 | 10.3.0.0 | — |