CVE-2023-35972

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Jul 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-359737.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilitie CVE-2023-359747.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilitie CVE-2023-359758.1An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability re CVE-2023-359766.5Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successfu CVE-2023-359776.5Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successfu CVE-2023-359786.1A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a CVE-2023-359797.5There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful CVE-2023-35988.8Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corrupti CVE-2023-359809.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin CVE-2023-359819.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin CVE-2023-359829.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin CVE-2023-359835.5This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7