CVE-2023-35977

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-359786.1A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against aCVE-2023-359797.5There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful CVE-2023-35988.8Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruptiCVE-2023-359809.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-359819.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-359829.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendinCVE-2023-359835.5This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7CVE-2023-359844.3The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An attackerCVE-2023-359858.8An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to propCVE-2023-359867.8Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overfCVE-2023-359879.8PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.CVE-2023-359897.8An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file