CVE-2022-23690

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-23690
A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further exploitation in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
OR cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*
History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-668 NVD-CWE-noinfo

12 Sep 2022, 14:16

Type Values Removed Values Added
CWE CWE-668
References (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt - (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt - Vendor Advisory
CPE cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_9300:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_4100i:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6200f:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8400:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8360:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8325:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6300:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6000:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_10000:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6100:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_8320:-:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:cx_6400:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3

06 Sep 2022, 18:50

Type Values Removed Values Added
New CVE
Information

Published : 2022-09-06 18:15

Updated : 2024-02-04 22:51

NVD link : CVE-2022-23690

Mitre link : CVE-2022-23690

CVE.ORG link : CVE-2022-23690

JSON object : View

Products Affected

arubanetworks

  • cx_8400
  • cx_6300
  • cx_6200f
  • cx_9300
  • cx_8360
  • aos-cx
  • cx_6100
  • cx_8325
  • cx_10000
  • cx_8320
  • cx_4100i
  • cx_6000
  • cx_6400
CWE
NVD-CWE-noinfo