deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2657
Published: 2022-09-05
Description: The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them and suspend vendors (reporter by the submitter) or update arbitrary order status (identified by WPScan when verifying the issue) for example. Other unauthenticated attacks are also possible, either directly or via CSRF
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/c600dd04-f6aa-430b-aefb-c4c6d554c41a; https://wpscan.com/vulnerability/c600dd04-f6aa-430b-aefb-c4c6d554c41a
CVE: CVE-2022-2775
Published: 2022-09-05
Description: The Fast Flow WordPress plugin before 1.2.13 does not sanitise and escape some of its Widget settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7101ce04-670e-4ce0-9f60-e00494ff379d; https://wpscan.com/vulnerability/7101ce04-670e-4ce0-9f60-e00494ff379d
CVE: CVE-2022-3127
Published: 2022-09-05
Description: Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da; https://huntr.dev/bounties/6cea89d1-39dc-4023-82fa-821f566b841a; https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da
CVE: CVE-2022-3121
Published: 2022-09-05
Description: A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The identifier VDB-207853 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://vuldb.com/?id.207853; https://vuldb.com/?id.207853
CVE: CVE-2022-3122
Published: 2022-09-05
Description: A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file medicine_details.php. The manipulation of the argument medicine leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207854 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/joinia/webray.com.cn/blob/main/Clinic%27s-Patient-Management-System/cpmssql.md; https://vuldb.com/?id.207854; https://github.com/joinia/webray.com.cn/blob/main/Clinic%27s-Patient-Management-System/cpmssql.md
CVE: CVE-2022-30331
Published: 2022-09-05
Description: The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++ code. NOTE: the vendor's position is "GSQL was behaving as expected."
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://docs.tigergraph.com/home/; https://docs.tigergraph.com/home/cve-2022-30331; https://neo4j.com/security/cve-2022-30331/
CVE: CVE-2022-31814
Published: 2022-09-05
Description: pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/168743/pfSense-pfBlockerNG-2.1.4_26-Shell-Upload.html; http://packetstormsecurity.com/files/171123/pfBlockerNG-2.1.4_26-Remote-Code-Execution.html; https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html
CVE: CVE-2022-39838
Published: 2022-09-05
Description: Systematic FIX Adapter (ALFAFX) 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: http://systematicalpha.com/company; http://systematicalpha.com/trading-programs/systematic-alpha-fx-master-fund; https://github.com/jet-pentest/CVE-2022-39838
CVE: CVE-2021-28398
Published: 2022-09-05
Description: A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. A User Administrator or Administrator account is required to perform this. This occurs in the runBeforeScript method in harvesters/src/main/java/org/fao/geonet/kernel/harvest/harvester/localfilesystem/LocalFilesystemHarvester.java. The earliest affected version is 3.4.0.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://geonetwork-opensource.org/; https://geonetwork-opensource.org/manuals/trunk/en/overview/change-log/version-3.6.0.html; https://github.com/geonetwork/core-geonetwork
CVE: CVE-2022-38367
Published: 2022-09-05
Description: The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://gist.github.com/CveCt0r/72a0b6292cd8d80499cf5971ae58147f; https://marketplace.atlassian.com/apps/1220535/user-export-for-jira; https://gist.github.com/CveCt0r/72a0b6292cd8d80499cf5971ae58147f
CVE: CVE-2022-34747
Published: 2022-09-06
Description: A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134, CWE-134
References: https://www.zyxel.com/support/Zyxel-security-advisory-for-format-string-vulnerability-in-NAS.shtml; https://www.zyxel.com/support/Zyxel-security-advisory-for-format-string-vulnerability-in-NAS.shtml
CVE: CVE-2022-34882
Published: 2022-09-06
Description: Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to gain sensitive information. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior to 02.05.01 on Windows and Docker.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-209, CWE-209
References: https://www.hitachi.com/products/it/storage-solutions/sec_info/2022/2022_307.html; https://www.hitachi.com/products/it/storage-solutions/sec_info/2022/2022_307.html
CVE: CVE-2022-34883
Published: 2022-09-06
Description: OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior to 02.05.01 on Windows and Docker.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.hitachi.com/products/it/storage-solutions/sec_info/2022/2022_307.html; https://www.hitachi.com/products/it/storage-solutions/sec_info/2022/2022_307.html
CVE: CVE-2022-2901
Published: 2022-09-06
Description: Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8.
CVSS Score: 7.1 (HIGH)
CWE: CWE-285
References: https://github.com/chatwoot/chatwoot/commit/329e8c37c8ebc1b3629c0c3830b0e3070a3adc2a; https://huntr.dev/bounties/cf46e0a6-f1b5-4959-a952-be9e4bac03fe; https://github.com/chatwoot/chatwoot/commit/329e8c37c8ebc1b3629c0c3830b0e3070a3adc2a
CVE: CVE-2022-2714
Published: 2022-09-06
Description: Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-130
References: https://github.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3; https://huntr.dev/bounties/430aedac-c7d9-4acb-9bab-bcc0595d9e95; https://github.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3
CVE: CVE-2021-43076
Published: 2022-09-06
Description: An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and below may allow a remote authenticated attacker with restricted user profile to modify the system files using the shell access.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269
References: https://fortiguard.com/psirt/FG-IR-21-215; https://fortiguard.com/psirt/FG-IR-21-215
CVE: CVE-2021-43080
Published: 2022-09-06
Description: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version 6.4.0 through 6.4.9, version 7.0.0 through 7.0.5 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack through the URI parameter via the Threat Feed IP address section of the Security Fabric External connectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-21-222; https://fortiguard.com/psirt/FG-IR-21-222
CVE: CVE-2022-26114
Published: 2022-09-06
Description: An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting (XSS) attack via sending specially crafted mail messages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-21-045; https://fortiguard.com/psirt/FG-IR-21-045
CVE: CVE-2022-31020
Published: 2022-09-06
Description: Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request handler in Indy-Node allows an improperly authenticated attacker to remotely execute code on nodes within the network. The `pool-upgrade` request handler in Indy-Node 1.12.5 has been updated to properly authenticate pool-upgrade transactions before any processing is performed by the request handler. The transactions are further sanitized to prevent remote code execution. As a workaround, endorsers should not create DIDs for untrusted users. A vulnerable ledger should configure `auth_rules` to prevent new DIDs from being written to the ledger until the network can be upgraded.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-287
References: https://github.com/hyperledger/indy-node/commit/fe507474f77084faef4539101e2bbb4d508a97f5; https://github.com/hyperledger/indy-node/releases/tag/v1.12.5; https://github.com/hyperledger/indy-node/security/advisories/GHSA-r6v9-p59m-gj2p
CVE: CVE-2022-36584
Published: 2022-09-06
Description: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-bug1.md; https://www.tendacn.com/download/detail-3401.html; https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-bug1.md
CVE: CVE-2022-37839
Published: 2022-09-06
Description: TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/5.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/5.md
CVE: CVE-2022-37840
Published: 2022-09-06
Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/3.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/3.md
CVE: CVE-2022-37841
Published: 2022-09-06
Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/2.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/2.md
CVE: CVE-2022-37842
Published: 2022-09-06
Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/1.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/1.md
CVE: CVE-2022-37843
Published: 2022-09-06
Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/4.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A860R/4.md
CVE: CVE-2022-40109
Published: 2022-09-06
Description: TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20[PII_REDACTED] is vulnerable to Insecure Permissions via binary /bin/boa.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/1.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/1.md
CVE: CVE-2022-40110
Published: 2022-09-06
Description: TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20[PII_REDACTED] is vulnerable to Buffer Overflow via /bin/boa.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/2.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/2.md
CVE: CVE-2022-40111
Published: 2022-09-06
Description: In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20[PII_REDACTED] in the shadow.sample file, root is hardcoded in the firmware.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/4.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/4.md
CVE: CVE-2022-40112
Published: 2022-09-06
Description: TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20[PII_REDACTED] is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/3.md; https://github.com/[PII_REDACTED]/iot/blob/main/TOTOLINK/A3002R/3.md
CVE: CVE-2020-8586
Published: 2022-09-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-36829
Published: 2022-09-06
Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 at WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/launcher/wordpress-launcher-coming-soon-maintenance-mode-plugin-1-0-11-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/launcher/; https://patchstack.com/database/vulnerability/launcher/wordpress-launcher-coming-soon-maintenance-mode-plugin-1-0-11-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-39324
Published: 2022-09-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-39326
Published: 2022-09-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-43565
Published: 2022-09-06
Description: The x/crypto/ssh package before 0.0.0[PII_REDACTED]2[PII_REDACTED]d904e of golang.org/x/crypto allows an attacker to panic an SSH server.
CVSS Score: 7.5 (HIGH)
References: https://groups.google.com/forum/#%21forum/golang-announce; https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs; https://groups.google.com/forum/#%21forum/golang-announce
CVE: CVE-2022-0844
Published: 2022-09-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-1260
Published: 2022-09-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-1628
Published: 2022-09-06
Description: The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by authenticated users with Contributor and above permissions to inject arbitrary web scripts into posts/pages that execute whenever an administrator access the page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2754807%40cds-simple-seo&new=2754807%40cds-simple-seo&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1628; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2754807%40cds-simple-seo&new=2754807%40cds-simple-seo&sfp_email=&sfph_mail=
CVE: CVE-2022-1697
Published: 2022-09-06
Description: Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.
CVSS Score: 3.9 (LOW)
CWE: CWE-428
References: https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm; https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ; https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697
CVE: CVE-2022-23451
Published: 2022-09-06
Description: An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863, CWE-863
References: https://access.redhat.com/security/cve/CVE-2022-23451; https://bugzilla.redhat.com/show_bug.cgi?id=2022878; https://bugzilla.redhat.com/show_bug.cgi?id=2025089
CVE: CVE-2022-23678
Published: 2022-09-06
Description: A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker in a privileged network position to intercept sensitive information in Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system versions: 4.3.0 build 2208101 and below. Aruba has released upgrades for Virtual Intranet Access (VIA) Client that address this security vulnerability.
CVSS Score: 5.9 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-011.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-011.txt
CVE: CVE-2022-23679
Published: 2022-09-06
Description: AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE: CVE-2022-23680
Published: 2022-09-06
Description: AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE: CVE-2022-23681
Published: 2022-09-06
Description: Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version(s): AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.06.xxxx: 10.06.0180 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE: CVE-2022-23682
Published: 2022-09-06
Description: Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version(s): AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.06.xxxx: 10.06.0180 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE: CVE-2022-23683
Published: 2022-09-06
Description: Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
CVE: CVE-2022-23684
Published: 2022-09-06
Description: A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their authorized level in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
CVSS Score: 8.8 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt