GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-23683 (GCVE-0-2022-23683)

Vulnerability from cvelistv5 – Published: 2022-09-06 17:18 – Updated: 2024-08-03 03:51
VLAI
Summary
Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
Severity
7.2 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE
  • Authenticated Remote Code Execution in AOS-CX Network Analytics Engine(NAE)
Assigner
References
Impacted products
Vendor Product Version CPE status
n/a Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Affected: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:45.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authenticated Remote Code Execution in AOS-CX Network Analytics Engine(NAE)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-06T17:18:53.000Z",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-alert@hpe.com",
          "ID": "CVE-2022-23683",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authenticated Remote Code Execution in AOS-CX Network Analytics Engine(NAE)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt",
              "refsource": "MISC",
              "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2022-23683",
    "datePublished": "2022-09-06T17:18:53.000Z",
    "dateReserved": "2022-01-19T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:51:45.907Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-23683",
      "date": "2026-09-15",
      "epss": "0.01675",
      "percentile": "0.75591"
    },
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C7FDB8CF-F5C9-470E-B6B4-B541B9C8006B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9645D616-077B-4313-B5EF-155B642CB073\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C93CD9C-1FD4-4E4A-9E3A-8FF19DE0D3AE\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C173D28A-1B18-4BB6-8CF2-95AFC62338DD\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B9440291-26BB-4BBD-84BA-B347484839F4\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A013EAE-387B-4C35-9D8F-E2200081E18E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C32F7E4-E184-4F76-8638-017DF29D2FFB\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3CB3993F-B4A6-4016-AF0F-82A23FE34063\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"563D5132-83C7-4613-91D8-4B5F2902FCA5\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB0ED82F-AADF-4439-BFF3-19D6DA234426\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"291D1002-00A7-44E0-ABFD-C64BAA2EDA0C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0220\", \"matchCriteriaId\": \"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1080\", \"matchCriteriaId\": \"B540A6B3-7472-4885-B28D-11655E58F967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1040\", \"matchCriteriaId\": \"46432E12-34D3-45C4-94FA-4889C250EE15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.10.0000\", \"versionEndExcluding\": \"10.10.1000\", \"matchCriteriaId\": \"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4FB7A6B-69C5-45EF-BE61-23BCF5172836\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.\"}, {\"lang\": \"es\", \"value\": \"Se presentan vulnerabilidades de inyecci\\u00f3n de comandos autenticados en el motor de an\\u00e1lisis de red AOS-CX por medio de scripts NAE. Una explotaci\\u00f3n con \\u00e9xito de estas vulnerabilidades resulta en la capacidad de ejecutar comandos arbitrarios como un usuario privilegiado en el sistema operativo subyacente, conllevando a un compromiso completo del switch que ejecuta AOS-CX en los Switches ArubaOS-CX versi\\u00f3n(es): AOS-CX 10.10.xxxx: 10.10.0002 y anteriores, AOS-CX 10.09.xxxx: 10.09.1030 y anteriores, AOS-CX 10.08.xxxx: 10.08.1070 y anteriores, AOS-CX 10.06.xxxx: 10.06.0210 y anterior. Aruba ha publicado actualizaciones para ArubaOS-CX Switch Devices que abordan estas vulnerabilidades de seguridad.\\n\"}]",
      "id": "CVE-2022-23683",
      "lastModified": "2024-11-21T06:49:05.577",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.2, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 5.9}]}",
      "published": "2022-09-06T18:15:11.110",
      "references": "[{\"url\": \"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\", \"source\": \"security-alert@hpe.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "security-alert@hpe.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-78\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-23683\",\"sourceIdentifier\":\"security-alert@hpe.com\",\"published\":\"2022-09-06T18:15:11.110\",\"lastModified\":\"2026-06-17T04:30:37.667\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.\"},{\"lang\":\"es\",\"value\":\"Se presentan vulnerabilidades de inyecci\u00f3n de comandos autenticados en el motor de an\u00e1lisis de red AOS-CX por medio de scripts NAE. Una explotaci\u00f3n con \u00e9xito de estas vulnerabilidades resulta en la capacidad de ejecutar comandos arbitrarios como un usuario privilegiado en el sistema operativo subyacente, conllevando a un compromiso completo del switch que ejecuta AOS-CX en los Switches ArubaOS-CX versi\u00f3n(es): AOS-CX 10.10.xxxx: 10.10.0002 y anteriores, AOS-CX 10.09.xxxx: 10.09.1030 y anteriores, AOS-CX 10.08.xxxx: 10.08.1070 y anteriores, AOS-CX 10.06.xxxx: 10.06.0210 y anterior. Aruba ha publicado actualizaciones para ArubaOS-CX Switch Devices que abordan estas vulnerabilidades de seguridad.\\n\"}],\"affected\":[{\"source\":\"security-alert@hpe.com\",\"affectedData\":[{\"vendor\":\"n/a\",\"product\":\"Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches\",\"versions\":[{\"version\":\"AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below.\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7FDB8CF-F5C9-470E-B6B4-B541B9C8006B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9645D616-077B-4313-B5EF-155B642CB073\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C93CD9C-1FD4-4E4A-9E3A-8FF19DE0D3AE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C173D28A-1B18-4BB6-8CF2-95AFC62338DD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9440291-26BB-4BBD-84BA-B347484839F4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A013EAE-387B-4C35-9D8F-E2200081E18E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C32F7E4-E184-4F76-8638-017DF29D2FFB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CB3993F-B4A6-4016-AF0F-82A23FE34063\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"563D5132-83C7-4613-91D8-4B5F2902FCA5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB0ED82F-AADF-4439-BFF3-19D6DA234426\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"291D1002-00A7-44E0-ABFD-C64BAA2EDA0C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0220\",\"matchCriteriaId\":\"5624F8A2-3B04-498D-90A0-204A7EEA01B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1080\",\"matchCriteriaId\":\"B540A6B3-7472-4885-B28D-11655E58F967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1040\",\"matchCriteriaId\":\"46432E12-34D3-45C4-94FA-4889C250EE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.10.0000\",\"versionEndExcluding\":\"10.10.1000\",\"matchCriteriaId\":\"870D98A0-0996-4881-AE0B-BDCA8E7341A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4FB7A6B-69C5-45EF-BE61-23BCF5172836\"}]}]}],\"references\":[{\"url\":\"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\",\"source\":\"security-alert@hpe.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-03-27T12:47:48+00:00",
      "cve": "CVE-2022-23683",
      "id": "CVE-2022-23683",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2022-23683",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23683.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.