CVE-2023-22754

Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes

High · published February 28, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01073 · 64.6th percentile
Published
2023-02-28T16:34Z
EPSS history
Timeline
  • 28 FEB 16:34Z
    Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
    cvelistv5