CVE-2023-22776

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-227776.5An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this CVE-2023-227784.8A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scriptinCVE-2023-227799.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-22789.8The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_CVE-2023-227809.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227819.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227829.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227839.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227849.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227859.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227869.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227877.5An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and
CVE-2023-22776: Medium severity, CVSS 4.9 | Vulnix