CVE-2023-3718: An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the…

PriorityP261high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

1.64%

75.3th percentile

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker to fully compromise the underlying operating system on the device running AOS-CX.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
hewlett_packard_enterprise	aruba_cx_switches	—	—
hewlett_packard_enterprise	aruba_cx_switches	—	—
hpe	arubaos-cx	10.10.0000 – 10.10.1050	—
hpe	arubaos-cx	10.11.0000 – 10.11.1010	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.