CVE-2022-23677

State: Published
Severity: Not scored
Published: May 10, 2022
Updated: Aug 3, 2024
Reserved: Jan 19, 2022

Description

A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
ArubaOS-Switch Devicesn/a	ArubaOS-Switch 15.xx.xxxx: All versionsAffected ArubaOS-Switch 16.01.xxxx: All versionsAffected ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and belowAffected ArubaOS-Switch 16.03.xxxx: All versionsAffected ArubaOS-Switch 16.04.xxxx: All versionsAffected ArubaOS-Switch 16.05.xxxx: All versionsAffected ArubaOS-Switch 16.06.xxxx: All versionsAffected ArubaOS-Switch 16.07.xxxx: All versionsAffected ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and belowAffected ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and belowAffected ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and belowAffected ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below.Affected

Product

Versions

ArubaOS-Switch Devicesn/a

ArubaOS-Switch 15.xx.xxxx: All versionsAffected
ArubaOS-Switch 16.01.xxxx: All versionsAffected
ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and belowAffected
ArubaOS-Switch 16.03.xxxx: All versionsAffected
ArubaOS-Switch 16.04.xxxx: All versionsAffected
ArubaOS-Switch 16.05.xxxx: All versionsAffected
ArubaOS-Switch 16.06.xxxx: All versionsAffected
ArubaOS-Switch 16.07.xxxx: All versionsAffected
ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and belowAffected
ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and belowAffected
ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and belowAffected
ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below.Affected

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-008.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.