CVE-2023-22788

Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

High · published May 8, 2023

CVSS v3.1
7.2
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01641 · 76.2th percentile
Published
2023-05-08T14:08Z
EPSS history
Timeline
  • 08 MAY 14:08Z
    Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface
    cvelistv5