Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface
CVE-2023-22789
8.8HIGH
What is CVE-2023-22789?
Multiple authenticated command injection vulnerabilities exist in the command line interface of Aruba InstantOS and ArubaOS 10. By exploiting these vulnerabilities, an attacker could execute arbitrary commands as a privileged user, potentially compromising the security of the underlying operating system. Proper security measures must be implemented to mitigate the risk associated with these vulnerabilities.
Affected Version(s)
Aruba Access Points running InstantOS and ArubaOS 10 Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below
Aruba Access Points running InstantOS and ArubaOS 10 Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below
Aruba Access Points running InstantOS and ArubaOS 10 Aruba InstantOS 6.5.x: 6.5.4.23 and below