CVE-2023-22754

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-227559.8There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code eCVE-2023-227569.8There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code eCVE-2023-227579.8There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code eCVE-2023-227587.2Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of theseCVE-2023-227597.2Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of theseCVE-2023-22769.8The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object ReferCVE-2023-227607.2Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of theseCVE-2023-227617.2Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of theseCVE-2023-227627.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilitieCVE-2023-227637.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilitieCVE-2023-227647.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilitieCVE-2023-227657.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilitie
CVE-2023-22754: Critical severity, CVSS 9.8 | Vulnix