CVE-2022-23676
critical · 9.8A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| arubanetworks | 5406r_firmware | >= 15.00.0, <= 15.16.0023 |
| arubanetworks | 5406r_firmware | >= 16.01.0, < 16.02.0034 |
| arubanetworks | 5406r_firmware | >= 16.03.0, < 16.04.0024 |
| arubanetworks | 5406r_firmware | >= 16.05.0, < 16.08.0025 |
| arubanetworks | 5406r_firmware | >= 16.09.0, < 16.09.0020 |
| arubanetworks | 5406r_firmware | >= 16.10.0, < 16.10.0020 |
| arubanetworks | 5406r_firmware | >= 16.11.0, < 16.11.0004 |
| arubanetworks | 5406r | all versions |
| arubanetworks | 3810m_firmware | >= 15.00.0, <= 15.16.0023 |
| arubanetworks | 3810m_firmware | >= 16.01.0, < 16.02.0034 |
| arubanetworks | 3810m_firmware | >= 16.03.0, <= 16.04.0024 |
| arubanetworks | 3810m_firmware | >= 16.05.0, < 16.08.0025 |
| arubanetworks | 3810m_firmware | >= 16.09.0, < 16.09.0020 |
| arubanetworks | 3810m_firmware | >= 16.10.0, < 16.10.0020 |
| arubanetworks | 3810m_firmware | >= 16.11.0, < 16.11.0004 |
| arubanetworks | 3810m | all versions |
| arubanetworks | 2920_firmware | >= 15.00.0, <= 15.16.0023 |
| arubanetworks | 2920_firmware | >= 16.01.0, < 16.02.0034 |
| arubanetworks | 2920_firmware | >= 16.03.0, <= 16.04.0024 |
| arubanetworks | 2920_firmware | >= 16.05.0, < 16.08.0025 |
| arubanetworks | 2920_firmware | >= 16.09.0, < 16.09.0020 |
| arubanetworks | 2920_firmware | >= 16.10.0, < 16.10.0020 |
| arubanetworks | 2920_firmware | >= 16.11.0, < 16.11.0004 |
| arubanetworks | 2920 | all versions |
| arubanetworks | 2930f_firmware | >= 15.00.0, <= 15.16.0023 |
| arubanetworks | 2930f_firmware | >= 16.01.0, < 16.02.0034 |
| arubanetworks | 2930f_firmware | >= 16.03.0, <= 16.04.0024 |
| arubanetworks | 2930f_firmware | >= 16.05.0, < 16.08.0025 |
| arubanetworks | 2930f_firmware | >= 16.09.0, <= 16.09.0020 |
| arubanetworks | 2930f_firmware | >= 16.10.0, <= 16.10.0020 |
| arubanetworks | 2930f_firmware | >= 16.11.0, <= 16.11.0004 |
| arubanetworks | 2930f | all versions |
| arubanetworks | 2930m_firmware | >= 15.00.0, <= 15.16.0023 |
| arubanetworks | 2930m_firmware | >= 16.01.0, < 16.02.0034 |
| arubanetworks | 2930m_firmware | >= 16.03.0, <= 16.04.0024 |
| arubanetworks | 2930m_firmware | >= 16.05.0, < 16.08.0025 |
| arubanetworks | 2930m_firmware | >= 16.09.0, < 16.09.0020 |
| arubanetworks | 2930m_firmware | >= 16.10.0, < 16.10.0020 |
| arubanetworks | 2930m_firmware | >= 16.11.0, < 16.11.0004 |
| arubanetworks | 2930m | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-23676