Arubanetworks Aos-Cx
12 CVEs affecting Arubanetworks Aos-Cx. Latest disclosed: 2022-09-06. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23684 | High | 8.8 | 2022-09-06 | A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions… |
CVE-2022-23680 | High | 8.8 | 2022-09-06 | AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context… |
CVE-2022-23679 | High | 8.8 | 2022-09-06 | AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context… |
CVE-2022-23682 | High | 7.8 | 2022-09-06 | Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an att… |
CVE-2022-23681 | High | 7.8 | 2022-09-06 | Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an att… |
CVE-2022-23683 | High | 7.2 | 2022-09-06 | Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities… |
CVE-2022-23691 | Medium | 6.8 | 2022-09-06 | A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A suc… |
CVE-2022-23690 | Medium | 5.3 | 2022-09-06 | A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running o… |
CVE-2022-23689 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |
CVE-2022-23688 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |
CVE-2022-23687 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |
CVE-2022-23686 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |