deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-27672
Published: 2023-03-01
Description: When SMT is enabled, certain AMD processors may speculatively execute instructions using a target
from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
CVSS Score: 4.7 (MEDIUM)
References: https://security.gentoo.org/glsa/202402-07; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1045; http://xenbits.xen.org/xsa/advisory-426.html
CVE: CVE-2022-27677
Published: 2023-03-01
Description: 
Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low
privileges to modify files potentially leading to privilege escalation and code execution by the lower
privileged user.


CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1052; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1052
CVE: CVE-2022-37935
Published: 2023-03-01
Description: HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
CVSS Score: 5.5 (MEDIUM)
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04449en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04449en_us
CVE: CVE-2022-37936
Published: 2023-03-01
Description: Unauthenticated Java deserialization vulnerability in Serviceguard Manager


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbmu04452en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbmu04452en_us
CVE: CVE-2022-37937
Published: 2023-03-01
Description: Pre-auth memory corruption in HPE Serviceguard
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbmu04452en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbmu04452en_us
CVE: CVE-2022-37938
Published: 2023-03-01
Description: Unauthenticated server side request forgery in HPE Serviceguard Manager
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbmu04452en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbmu04452en_us
CVE: CVE-2022-38735
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-38736
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-38737
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-38738
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-38739
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-38740
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-38741
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-3168
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-40148
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-42293
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-42294
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-42295
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-42296
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-42297
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-42298
Published: 2023-03-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-0567
Published: 2023-03-01
Description: In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
CVSS Score: 7.7 (HIGH)
CWE: CWE-916, CWE-916
References: https://bugs.php.net/bug.php?id=81744; https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4; https://bugs.php.net/bug.php?id=81744
CVE: CVE-2023-0951
Published: 2023-03-01
Description: Improper access controls on some API endpoints in Devolutions Server 2022.3.12 
and earlier could allow a standard privileged user to perform privileged 
actions.



CVSS Score: 8.8 (HIGH)
References: https://devolutions.net/security/advisories/DEVO-2023-0003; https://devolutions.net/security/advisories/DEVO-2023-0003
CVE: CVE-2023-0952
Published: 2023-03-01
Description: Improper access controls on entries in Devolutions Server 
2022.3.12 and earlier could allow an authenticated user to access 
sensitive data without proper authorization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://devolutions.net/security/advisories/DEVO-2023-0003; https://devolutions.net/security/advisories/DEVO-2023-0003
CVE: CVE-2023-0953
Published: 2023-03-01
Description: Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources.



CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://devolutions.net/security/advisories/DEVO-2023-0003; https://devolutions.net/security/advisories/DEVO-2023-0003
CVE: CVE-2023-20009
Published: 2023-03-01
Description: A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a [[privilege of operator - validate actual name]].
 The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that when uploaded could allow for the execution of commands as root. An exploit could allow the attacker to gain root access on the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-434
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8
CVE: CVE-2023-20014
Published: 2023-03-01
Description: A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
 This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399, CWE-400
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-dnsdos-bYscZOsu; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-dnsdos-bYscZOsu
CVE: CVE-2023-20032
Published: 2023-03-01
Description: On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:
  A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code.
  This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting in a denial of service (DoS) condition.
 For a description of this vulnerability, see the ClamAV blog ["https://blog.clamav.net/"].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-q8DThCy; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-q8DThCy
CVE: CVE-2023-20052
Published: 2023-03-01
Description: On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:
  A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device.
  This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611, CWE-776
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN
CVE: CVE-2023-20053
Published: 2023-03-01
Description: A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
 This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nexus-dashboard-xss-xc5BcgsQ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nexus-dashboard-xss-xc5BcgsQ
CVE: CVE-2023-20075
Published: 2023-03-01
Description: Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands.
 These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.

CVSS Score: 6.0 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8
CVE: CVE-2023-20085
Published: 2023-03-01
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
 This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-ubfHG75C; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-ubfHG75C
CVE: CVE-2023-22747
Published: 2023-03-01
Description: There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22748
Published: 2023-03-01
Description: 
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22749
Published: 2023-03-01
Description: 
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22750
Published: 2023-03-01
Description: 
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22751
Published: 2023-03-01
Description: There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211).  Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22752
Published: 2023-03-01
Description: There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211).  Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22753
Published: 2023-03-01
Description: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 8.1 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22754
Published: 2023-03-01
Description: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22755
Published: 2023-03-01
Description: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22756
Published: 2023-03-01
Description: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22757
Published: 2023-03-01
Description: There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22758
Published: 2023-03-01
Description: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22759
Published: 2023-03-01
Description: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22760
Published: 2023-03-01
Description: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22761
Published: 2023-03-01
Description: Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22762
Published: 2023-03-01
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.


CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt
CVE: CVE-2023-22763
Published: 2023-03-01
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.


CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt