« Volver al listado

CVE-2022-23691

Estado: ModificadaMedia (6.8)—

A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Arubanetworks — Aos-cx

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-23691",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches",
          "versions": [
            {
              "status": "affected",
              "version": "AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below."
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-09-06T18:15:11.390",
  "references": [
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad en determinados modelos de switches AOS-CX que podría permitir a un atacante con acceso a la consola de recuperación omitir la autenticación normal. Una explotación con éxito permite a un atacante omitir la autenticación del sistema y lograr el compromiso total del switch en los Switches ArubaOS-CX versión(es): AOS-CX 10.10.xxxx: 10.10.0002 y anteriores, AOS-CX 10.09.xxxx: 10.09.1030 y anteriores, AOS-CX 10.08.xxxx: 10.08.1070 y anteriores, AOS-CX 10.06.xxxx: 10.06.0210 y anteriores. Aruba ha publicado actualizaciones para los dispositivos ArubaOS-CX Switches que abordan esta vulnerabilidad de seguridad.\n"
    }
  ],
  "lastModified": "2026-06-17T04:30:38.710",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDFA4485-2536-4A2F-8C9E-8D563D9154D2",
              "versionEndIncluding": "10.06.0210",
              "versionStartIncluding": "10.06.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F08D076-E6F5-4168-825E-76ACA0381B6E",
              "versionEndIncluding": "10.08.1070",
              "versionStartIncluding": "10.08.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08415D6F-9E00-4168-8FCD-70A97994F33F",
              "versionEndIncluding": "10.09.1030",
              "versionStartIncluding": "10.09.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3153DF3A-4734-4A19-84DE-6CD94336B4D6",
              "versionEndIncluding": "10.10.0002",
              "versionStartIncluding": "10.10.0000"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C7FDB8CF-F5C9-470E-B6B4-B541B9C8006B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDFA4485-2536-4A2F-8C9E-8D563D9154D2",
              "versionEndIncluding": "10.06.0210",
              "versionStartIncluding": "10.06.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F08D076-E6F5-4168-825E-76ACA0381B6E",
              "versionEndIncluding": "10.08.1070",
              "versionStartIncluding": "10.08.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08415D6F-9E00-4168-8FCD-70A97994F33F",
              "versionEndIncluding": "10.09.1030",
              "versionStartIncluding": "10.09.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3153DF3A-4734-4A19-84DE-6CD94336B4D6",
              "versionEndIncluding": "10.10.0002",
              "versionStartIncluding": "10.10.0000"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9645D616-077B-4313-B5EF-155B642CB073"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDFA4485-2536-4A2F-8C9E-8D563D9154D2",
              "versionEndIncluding": "10.06.0210",
              "versionStartIncluding": "10.06.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F08D076-E6F5-4168-825E-76ACA0381B6E",
              "versionEndIncluding": "10.08.1070",
              "versionStartIncluding": "10.08.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08415D6F-9E00-4168-8FCD-70A97994F33F",
              "versionEndIncluding": "10.09.1030",
              "versionStartIncluding": "10.09.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3153DF3A-4734-4A19-84DE-6CD94336B4D6",
              "versionEndIncluding": "10.10.0002",
              "versionStartIncluding": "10.10.0000"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7C93CD9C-1FD4-4E4A-9E3A-8FF19DE0D3AE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDFA4485-2536-4A2F-8C9E-8D563D9154D2",
              "versionEndIncluding": "10.06.0210",
              "versionStartIncluding": "10.06.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F08D076-E6F5-4168-825E-76ACA0381B6E",
              "versionEndIncluding": "10.08.1070",
              "versionStartIncluding": "10.08.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08415D6F-9E00-4168-8FCD-70A97994F33F",
              "versionEndIncluding": "10.09.1030",
              "versionStartIncluding": "10.09.0000"
            },
            {
              "criteria": "cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3153DF3A-4734-4A19-84DE-6CD94336B4D6",
              "versionEndIncluding": "10.10.0002",
              "versionStartIncluding": "10.10.0000"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C173D28A-1B18-4BB6-8CF2-95AFC62338DD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}