CVE-2023-39267 - Vulnerability Details

Vendors	Products
Arubanetworks	Aruba 2530 Aruba 2530ya Aruba 2530yb Aruba 2540 Aruba 2920 Aruba 2930f Aruba 2930m Aruba 3810m Aruba 5406r Zl2 Aruba 5412r Zl2
Hpe	Arubaos-switch

Link	Providers
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-39267", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2023-07-26T15:52:27.843Z", "datePublished": "2023-08-29T19:28:55.315Z", "dateUpdated": "2024-09-27T19:54:56.961Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "ArubaOS-Switch", "vendor": "Hewlett Packard Enterprise", "versions": [{"status": "affected", "version": "ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0012 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC.16.10.0025 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: WB.16.10.23 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.09.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0026 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.07.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.06.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.05.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0026 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.03.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.02.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.01.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 15.xx.xxxx: 15.16.0025 and below."}]}], "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Lino Mirgeler of DTS Systeme GmbH"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<pre><pre>An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.</pre><br></pre>"}], "value": "An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.\n\n\n\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2023-08-29T19:28:55.315Z"}, "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt"}], "source": {"discovery": "UNKNOWN"}, "title": "Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:02:06.899Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-27T19:41:36.720364Z", "id": "CVE-2023-39267", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-27T19:54:56.961Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-39267 (string)

assignerOrgId : eb103674-0d28-4225-80f8-39fb86215de0 (string)

state : PUBLISHED (string)

assignerShortName : hpe (string)

dateReserved : 2023-07-26T15:52:27.843Z (string)

datePublished : 2023-08-29T19:28:55.315Z (string)

dateUpdated : 2024-09-27T19:54:56.961Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : affected (string)

product : ArubaOS-Switch (string)

vendor : Hewlett Packard Enterprise (string)

versions : [ »

0 : { »

status : affected (string)

version : ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0012 and below. (string)

}

1 : { »

status : affected (string)

version : ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC.16.10.0025 and below. (string)

}

2 : { »

status : affected (string)

version : ArubaOS-Switch 16.10.xxxx: WB.16.10.23 and below. (string)

}

3 : { »

status : affected (string)

version : ArubaOS-Switch 16.09.xxxx: All versions. (string)

}

4 : { »

status : affected (string)

version : ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0026 and below. (string)

}

5 : { »

status : affected (string)

version : ArubaOS-Switch 16.07.xxxx: All versions. (string)

}

6 : { »

status : affected (string)

version : ArubaOS-Switch 16.06.xxxx: All versions. (string)

}

7 : { »

status : affected (string)

version : ArubaOS-Switch 16.05.xxxx: All versions. (string)

}

8 : { »

status : affected (string)

version : ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0026 and below. (string)

}

9 : { »

status : affected (string)

version : ArubaOS-Switch 16.03.xxxx: All versions. (string)

}

10 : { »

status : affected (string)

version : ArubaOS-Switch 16.02.xxxx: All versions. (string)

}

11 : { »

status : affected (string)

version : ArubaOS-Switch 16.01.xxxx: All versions. (string)

}

12 : { »

status : affected (string)

version : ArubaOS-Switch 15.xx.xxxx: 15.16.0025 and below. (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

type : reporter (string)

user : 00000000-0000-4000-9000-000000000000 (string)

value : Lino Mirgeler of DTS Systeme GmbH (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : <pre><pre>An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.</pre><br></pre> (string)

}

]

value : An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

providerMetadata : { »

orgId : eb103674-0d28-4225-80f8-39fb86215de0 (string)

shortName : hpe (string)

dateUpdated : 2023-08-29T19:28:55.315Z (string)

}

references : [ »

0 : { »

url : https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T18:02:06.899Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-09-27T19:41:36.720364Z (string)

id : CVE-2023-39267 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-27T19:54:56.961Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:02:06.899Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-39267", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-27T19:41:36.720364Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-27T19:54:47.784Z"}}], "cna": {"title": "Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Lino Mirgeler of DTS Systeme GmbH"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hewlett Packard Enterprise", "product": "ArubaOS-Switch", "versions": [{"status": "affected", "version": "ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0012 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC.16.10.0025 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.10.xxxx: WB.16.10.23 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.09.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0026 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.07.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.06.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.05.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0026 and below."}, {"status": "affected", "version": "ArubaOS-Switch 16.03.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.02.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 16.01.xxxx: All versions."}, {"status": "affected", "version": "ArubaOS-Switch 15.xx.xxxx: 15.16.0025 and below."}], "defaultStatus": "affected"}], "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.\n\n\n\n\n", "supportingMedia": [{"type": "text/html", "value": "<pre><pre>An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.</pre><br></pre>", "base64": false}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2023-08-29T19:28:55.315Z"}}}, "cveMetadata": {"cveId": "CVE-2023-39267", "state": "PUBLISHED", "dateUpdated": "2024-09-27T19:54:56.961Z", "dateReserved": "2023-07-26T15:52:27.843Z", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "datePublished": "2023-08-29T19:28:55.315Z", "assignerShortName": "hpe"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T18:02:06.899Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-39267 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-27T19:41:36.720364Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-27T19:54:47.784Z (string)

}

]

cna : { »

title : Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface (string)

source : { »

discovery : UNKNOWN (string)

}

credits : [ »

0 : { »

lang : en (string)

type : reporter (string)

user : 00000000-0000-4000-9000-000000000000 (string)

value : Lino Mirgeler of DTS Systeme GmbH (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 6.6 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : LOW (string)

privilegesRequired : HIGH (string)

confidentialityImpact : NONE (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Hewlett Packard Enterprise (string)

product : ArubaOS-Switch (string)

versions : [ »

0 : { »

status : affected (string)

version : ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0012 and below. (string)

}

1 : { »

status : affected (string)

version : ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC.16.10.0025 and below. (string)

}

2 : { »

status : affected (string)

version : ArubaOS-Switch 16.10.xxxx: WB.16.10.23 and below. (string)

}

3 : { »

status : affected (string)

version : ArubaOS-Switch 16.09.xxxx: All versions. (string)

}

4 : { »

status : affected (string)

version : ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0026 and below. (string)

}

5 : { »

status : affected (string)

version : ArubaOS-Switch 16.07.xxxx: All versions. (string)

}

6 : { »

status : affected (string)

version : ArubaOS-Switch 16.06.xxxx: All versions. (string)

}

7 : { »

status : affected (string)

version : ArubaOS-Switch 16.05.xxxx: All versions. (string)

}

8 : { »

status : affected (string)

version : ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0026 and below. (string)

}

9 : { »

status : affected (string)

version : ArubaOS-Switch 16.03.xxxx: All versions. (string)

}

10 : { »

status : affected (string)

version : ArubaOS-Switch 16.02.xxxx: All versions. (string)

}

11 : { »

status : affected (string)

version : ArubaOS-Switch 16.01.xxxx: All versions. (string)

}

12 : { »

status : affected (string)

version : ArubaOS-Switch 15.xx.xxxx: 15.16.0025 and below. (string)

}

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt (string)

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : <pre><pre>An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.</pre><br></pre> (string)

base64 : false (boolean)

}

]

}

]

providerMetadata : { »

orgId : eb103674-0d28-4225-80f8-39fb86215de0 (string)

shortName : hpe (string)

dateUpdated : 2023-08-29T19:28:55.315Z (string)

}

cveMetadata : { »

cveId : CVE-2023-39267 (string)

state : PUBLISHED (string)

dateUpdated : 2024-09-27T19:54:56.961Z (string)

dateReserved : 2023-07-26T15:52:27.843Z (string)

assignerOrgId : eb103674-0d28-4225-80f8-39fb86215de0 (string)

datePublished : 2023-08-29T19:28:55.315Z (string)

assignerShortName : hpe (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:*", "matchCriteriaId": "6EF6288C-3E1F-4E2F-BDE2-319E6774F1BD", "versionEndExcluding": "a.15.16.0026", "vulnerable": true}, {"criteria": "cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:*", "matchCriteriaId": "D421C423-B11A-43F0-A0E9-9ABD0CC3E7A9", "versionEndExcluding": "16.04.0027", "versionStartIncluding": "16.01.0000", "vulnerable": true}, {"criteria": "cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:*", "matchCriteriaId": "90E95208-9E6A-4A27-91EF-EFF9EBB5CDF0", "versionEndExcluding": "16.08.0027", "versionStartIncluding": "16.05.0000", "vulnerable": true}, {"criteria": "cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:*", "matchCriteriaId": "3A977A83-A7F4-4FE7-9AC9-5584801CC039", "versionEndExcluding": "16.10.0024", "versionStartIncluding": "16.10.0001", "vulnerable": true}, {"criteria": "cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF10EBA8-E257-4E81-8B5A-04E643FD27F4", "versionEndExcluding": "16.11.0013", "versionStartIncluding": "16.11.0001", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:arubanetworks:aruba_2530:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA0DC0DE-5F4A-4D2A-AFCA-E36A103D5A6E", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_2530ya:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8251986-B9F2-4345-A4D7-EB3737F12AE0", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_2530yb:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D7A8F42-55C8-4A2B-8A34-1B1B8BE3BEDF", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_2540:-:*:*:*:*:*:*:*", "matchCriteriaId": "FDEDD15E-289E-4B15-8620-547EA19CAEE7", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_2920:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1782D4A-AD68-4BD2-8453-EE22BCF2DC99", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_2930f:-:*:*:*:*:*:*:*", "matchCriteriaId": "97C4FCD2-BB70-4848-B08A-223B5C3467BB", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_2930m:-:*:*:*:*:*:*:*", "matchCriteriaId": "2561E158-FB61-4FFD-B680-DADF7BC2C6D1", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_3810m:-:*:*:*:*:*:*:*", "matchCriteriaId": "F3CE933B-68BA-45BA-81BD-95D873B858B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_5406r_zl2:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E982204-9ADC-4242-86C2-A407D6EA7DB0", "vulnerable": false}, {"criteria": "cpe:2.3:h:arubanetworks:aruba_5412r_zl2:-:*:*:*:*:*:*:*", "matchCriteriaId": "8549CD94-50E2-4615-94C2-D76FADFBA3AC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.\n\n\n\n\n"}, {"lang": "es", "value": "Existe una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo autenticada en la interfaz de l\u00ednea de comandos de ArubaOS-Switch. La explotaci\u00f3n exitosa da como resultado una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en el switch.\n"}], "id": "CVE-2023-39267", "lastModified": "2024-11-21T08:15:01.180", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 4.7, "source": "security-alert@hpe.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-29T20:15:09.743", "references": [{"source": "security-alert@hpe.com", "tags": ["Vendor Advisory"], "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt"}], "sourceIdentifier": "security-alert@hpe.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6EF6288C-3E1F-4E2F-BDE2-319E6774F1BD (string)

versionEndExcluding : a.15.16.0026 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D421C423-B11A-43F0-A0E9-9ABD0CC3E7A9 (string)

versionEndExcluding : 16.04.0027 (string)

versionStartIncluding : 16.01.0000 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 90E95208-9E6A-4A27-91EF-EFF9EBB5CDF0 (string)

versionEndExcluding : 16.08.0027 (string)

versionStartIncluding : 16.05.0000 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3A977A83-A7F4-4FE7-9AC9-5584801CC039 (string)

versionEndExcluding : 16.10.0024 (string)

versionStartIncluding : 16.10.0001 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:hpe:arubaos-switch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EF10EBA8-E257-4E81-8B5A-04E643FD27F4 (string)

versionEndExcluding : 16.11.0013 (string)

versionStartIncluding : 16.11.0001 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_2530:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CA0DC0DE-5F4A-4D2A-AFCA-E36A103D5A6E (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_2530ya:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B8251986-B9F2-4345-A4D7-EB3737F12AE0 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_2530yb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3D7A8F42-55C8-4A2B-8A34-1B1B8BE3BEDF (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_2540:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FDEDD15E-289E-4B15-8620-547EA19CAEE7 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_2920:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B1782D4A-AD68-4BD2-8453-EE22BCF2DC99 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_2930f:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 97C4FCD2-BB70-4848-B08A-223B5C3467BB (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_2930m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2561E158-FB61-4FFD-B680-DADF7BC2C6D1 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_3810m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F3CE933B-68BA-45BA-81BD-95D873B858B1 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_5406r_zl2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8E982204-9ADC-4242-86C2-A407D6EA7DB0 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:arubanetworks:aruba_5412r_zl2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8549CD94-50E2-4615-94C2-D76FADFBA3AC (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch. (string)

}

1 : { »

lang : es (string)

value : Existe una vulnerabilidad de ejecución remota de código autenticada en la interfaz de línea de comandos de ArubaOS-Switch. La explotación exitosa da como resultado una condición de denegación de servicio (DoS) en el switch. (string)

}

]

id : CVE-2023-39267 (string)

lastModified : 2024-11-21T08:15:01.180 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 1.3 (number)

impactScore : 4.7 (number)

source : security-alert@hpe.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-29T20:15:09.743 (string)

references : [ »

0 : { »

source : security-alert@hpe.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt (string)

}

]

sourceIdentifier : security-alert@hpe.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object