CVE-2023-22789

HIGH

ArubaOS 10.3.0.0-10.3.0.9 and InstantOS 6.4.0.0-6.4.4.7 - Authenticated Command Injection

Title source: llm
STIX 2.1

Description

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.0041
EPSS Percentile 61.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Products (2)
arubanetworks/arubaos 10.3.0.0 - 10.3.1.0
hp/instantos 6.4.0.0 - 6.4.4.8-4.2.4.20
Published May 08, 2023
Tracked Since Feb 18, 2026