← Database
CVE-2023-22771
MEDIUM
CVSS: 6.8
Published: 2023-03-01
Modified: 2026-06-17
Description
An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account
Affected Platforms
Arubanetworks 9012Arubanetworks Mcr-Va-5KArubanetworks ArubaosArubanetworks Sd-WanArubanetworks 9004-LteArubanetworks Mcr-Hw-1KArubanetworks 7240XmArubanetworks Mc-Va-50Arubanetworks Mc-Va-1KArubanetworks 7220