Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

CVE-2023-22790

Summary

Multiple command injection vulnerabilities exist in the command line interface of Aruba InstantOS and ArubaOS 10. Exploiting these vulnerabilities allows attackers, who have already authenticated, to execute arbitrary commands with the privileges of a privileged user on the underlying operating system. This poses a significant risk to the integrity and confidentiality of the system, as malicious actors could gain unauthorized access to sensitive information and system controls.

References