Medium severity · published May 8, 2023
CVE-2023-22791
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already…
4.8
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in which this disclosure of potentially sensitive information can occur are complex and depend on factors that are beyond the control of the attacker.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Arubaos · Arubanetworks
10.3.0.0 through 10.3.1.0 · source: NVD
IN
Instantos · HP
6.4.0.0 through 6.4.4.8-4.2.4.20; 6.5.0.0 through 6.5.4.23; 8.4.0.0 before 8.6.0.0; 8.6.0.0 through 8.6.0.19; 8.7.0.0 through 8.9.0.0; 8.10.0.0 through 8.10.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-22791
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-22791
Vendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
More from Arubaos
9.8
CVE-2024-42395
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack
9.8
CVE-2024-42394
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack
9.8
CVE-2024-42393
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack
9.8
CVE-2024-31473
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets…
9.8
CVE-2024-31472
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets…