← Database

CVE-2023-22759

HIGH CVSS: 7.2 Published: 2023-03-01 Modified: 2026-06-17

Description

Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.

Affected Platforms

Arubanetworks ArubaosArubanetworks Sd-Wan

Weakness Type

CWE-77

References