Lucene search
HpeCVELIST:CVE-2022-23691HistorySep 06, 2022 - 5:18 p.m.
CVE-2022-23691
2022-09-0617:18:55
hpe
www.cve.org
1
aos-cx switch
vulnerability
bypassing authentication
arubaos-cx switches
security upgrade
A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
CNA Affected
[
{
"product": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below."
}
]
}
]Related
nvd
nvd
CVE-2022-23691
2022-09-06 18:15:11
cve
cve
CVE-2022-23691
2022-09-06 18:15:11
prion
prion
Authentication flaw
2022-09-06 18:15:00