Vendors / Arubanetworks Records 684 All Threatist records
Exploited (KEV) 1
CVSS critical 106
CVSS high 363
Exploited now Arubanetworks records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01183 · Published 2022-09-06 · No fix listed
Priority LOW 38
AOS-CX lacks Anti-CSRF protections in place for state-changing operations.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0043 · Published 2022-09-06 · No fix listed CWE-352
Priority LOW 38
AOS-CX lacks Anti-CSRF protections in place for state-changing operations.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0043 · Published 2022-09-06 · No fix listed CWE-352
Priority LOW 35
Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01662 · Published 2022-09-06 · No fix listed CWE-78
Priority LOW 35
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0058 · Published 2022-09-06 · No fix listed CWE-78
Priority LOW 35
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00549 · Published 2022-09-06 · No fix listed CWE-78
Priority LOW 30
A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00364 · Published 2022-09-06 · No fix listed
Priority LOW 26
A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00865 · Published 2022-09-06 · No fix listed
Priority LOW 20
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.
CVSS 3.1 MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.0032 · Published 2022-09-06 · No fix listed
Priority LOW 20
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.
CVSS 3.1 MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.0032 · Published 2022-09-06 · No fix listed
Priority LOW 20
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.
CVSS 3.1 MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.0032 · Published 2022-09-06 · No fix listed
Priority LOW 20
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.
CVSS 3.1 MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.0032 · Published 2022-09-06 · No fix listed
Open these records in search → All records by CVSS severity
106 363 207 8 0
THREATIST.IORead the docs