Yüksek CVSS 8.8
CVE-2023-22789: Arubaos: komut enjeksiyonu
Açıklama (NVD)
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Özet bilgiler
- Ürün
- Arubanetworks Arubaos
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,60 (yüzdelik 76)
- CWE
- CWE-77
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| arubanetworks-arubaos | 10.3.0.0 | 10.3.1.0 | — |
| hp-instantos | 6.4.0.0 | 6.4.4.8-4.2.4.20 | — |
| hp-instantos | 6.5.0.0 | 6.5.4.23 | — |
| hp-instantos | 8.4.0.0 | — | 8.6.0.0 |
| hp-instantos | 8.6.0.0 | 8.6.0.19 | — |
| hp-instantos | 8.7.0.0 | 8.9.0.0 | — |
| hp-instantos | 8.10.0.0 | 8.10.0.4 | — |