VULNERABILITY INTELLIGENCE

CVE-2023-22776

CVSS score4.9 MEDIUM
EPSS probability0.71%
CISA KEVNot currently listed
Published2023-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

Weakness classification

  • nvd@nist.gov: CWE-22
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22

Primary references