CVE-2022-23684 (GCVE-0-2022-23684)

Vulnerability from cvelistv5 – Published: 2022-09-06 17:18 – Updated: 2024-08-03 03:51
VLAI
Summary
A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their authorized level in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
Severity
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • Authenticated Privilege Escalation in the Web-Management Interface
Assigner
References
Impacted products
Vendor Product Version CPE status
n/a Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches Affected: AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:45.908Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their authorized level in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authenticated Privilege Escalation in the Web-Management Interface",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-06T17:18:53.000Z",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-alert@hpe.com",
          "ID": "CVE-2022-23684",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their authorized level in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authenticated Privilege Escalation in the Web-Management Interface"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt",
              "refsource": "MISC",
              "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2022-23684",
    "datePublished": "2022-09-06T17:18:53.000Z",
    "dateReserved": "2022-01-19T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:51:45.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-23684",
      "date": "2026-09-15",
      "epss": "0.0115",
      "percentile": "0.65143"
    },
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C7FDB8CF-F5C9-470E-B6B4-B541B9C8006B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9645D616-077B-4313-B5EF-155B642CB073\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C93CD9C-1FD4-4E4A-9E3A-8FF19DE0D3AE\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C173D28A-1B18-4BB6-8CF2-95AFC62338DD\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B9440291-26BB-4BBD-84BA-B347484839F4\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A013EAE-387B-4C35-9D8F-E2200081E18E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C32F7E4-E184-4F76-8638-017DF29D2FFB\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3CB3993F-B4A6-4016-AF0F-82A23FE34063\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"563D5132-83C7-4613-91D8-4B5F2902FCA5\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB0ED82F-AADF-4439-BFF3-19D6DA234426\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"291D1002-00A7-44E0-ABFD-C64BAA2EDA0C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.06.0000\", \"versionEndExcluding\": \"10.06.0210\", \"matchCriteriaId\": \"D707F695-3511-4351-8C95-842789C134A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.08.0000\", \"versionEndExcluding\": \"10.08.1070\", \"matchCriteriaId\": \"A95646B3-275F-4EB3-9034-6FF5282A539C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.09.0000\", \"versionEndExcluding\": \"10.09.1030\", \"matchCriteriaId\": \"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4FB7A6B-69C5-45EF-BE61-23BCF5172836\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their authorized level in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad en la interfaz de administraci\\u00f3n basada en web de AOS-CX podr\\u00eda permitir a un usuario remoto autenticado privilegiado de s\\u00f3lo lectura escalar sus permisos a los de un usuario administrativo. Una explotaci\\u00f3n con \\u00e9xito de esta vulnerabilidad permite a un atacante escalar los privilegios m\\u00e1s all\\u00e1 de su nivel autorizado en los Switches ArubaOS-CX versi\\u00f3n(es): AOS-CX 10.09.xxxx: 10.09.1020 y anteriores, AOS-CX 10.08.xxxx: 10.08.1060 y anteriores, AOS-CX 10.06.xxxx: 10.06.0200 y anteriores. Aruba ha publicado actualizaciones para los dispositivos ArubaOS-CX Switches que abordan esta vulnerabilidad de seguridad.\\n\"}]",
      "id": "CVE-2022-23684",
      "lastModified": "2024-11-21T06:49:05.730",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}]}",
      "published": "2022-09-06T18:15:11.153",
      "references": "[{\"url\": \"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\", \"source\": \"security-alert@hpe.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "security-alert@hpe.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-23684\",\"sourceIdentifier\":\"security-alert@hpe.com\",\"published\":\"2022-09-06T18:15:11.153\",\"lastModified\":\"2026-06-17T04:30:37.790\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their authorized level in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de AOS-CX podr\u00eda permitir a un usuario remoto autenticado privilegiado de s\u00f3lo lectura escalar sus permisos a los de un usuario administrativo. Una explotaci\u00f3n con \u00e9xito de esta vulnerabilidad permite a un atacante escalar los privilegios m\u00e1s all\u00e1 de su nivel autorizado en los Switches ArubaOS-CX versi\u00f3n(es): AOS-CX 10.09.xxxx: 10.09.1020 y anteriores, AOS-CX 10.08.xxxx: 10.08.1060 y anteriores, AOS-CX 10.06.xxxx: 10.06.0200 y anteriores. Aruba ha publicado actualizaciones para los dispositivos ArubaOS-CX Switches que abordan esta vulnerabilidad de seguridad.\\n\"}],\"affected\":[{\"source\":\"security-alert@hpe.com\",\"affectedData\":[{\"vendor\":\"n/a\",\"product\":\"Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches\",\"versions\":[{\"version\":\"AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below.\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7FDB8CF-F5C9-470E-B6B4-B541B9C8006B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9645D616-077B-4313-B5EF-155B642CB073\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C93CD9C-1FD4-4E4A-9E3A-8FF19DE0D3AE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C173D28A-1B18-4BB6-8CF2-95AFC62338DD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9440291-26BB-4BBD-84BA-B347484839F4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A013EAE-387B-4C35-9D8F-E2200081E18E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C32F7E4-E184-4F76-8638-017DF29D2FFB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CB3993F-B4A6-4016-AF0F-82A23FE34063\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"563D5132-83C7-4613-91D8-4B5F2902FCA5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB0ED82F-AADF-4439-BFF3-19D6DA234426\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"291D1002-00A7-44E0-ABFD-C64BAA2EDA0C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.06.0000\",\"versionEndExcluding\":\"10.06.0210\",\"matchCriteriaId\":\"D707F695-3511-4351-8C95-842789C134A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.08.0000\",\"versionEndExcluding\":\"10.08.1070\",\"matchCriteriaId\":\"A95646B3-275F-4EB3-9034-6FF5282A539C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.09.0000\",\"versionEndExcluding\":\"10.09.1030\",\"matchCriteriaId\":\"3E7AF646-CB0A-45FD-9A51-59369845E41F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4FB7A6B-69C5-45EF-BE61-23BCF5172836\"}]}]}],\"references\":[{\"url\":\"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\",\"source\":\"security-alert@hpe.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-03-27T12:47:48+00:00",
      "cve": "CVE-2022-23684",
      "id": "CVE-2022-23684",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2022-23684",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23684.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.