CVE-2023-22777

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-227784.8A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scriptinCVE-2023-227799.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-22789.8The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_CVE-2023-227809.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227819.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227829.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227839.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227849.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227859.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227869.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-227877.5An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and CVE-2023-227888.8Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful expl
CVE-2023-22777: Medium severity, CVSS 6.5 | Vulnix