CVE-2023-39267

Published: Aug 29, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.

Affected (5)

Products: Hpe: Arubaos Switch

Hpe

1 product

Arubaos Switch

Configuration A

5 vulnerable · 10 platform

Vulnerable Software	Affected Versions
Hpe Arubaos Switch	version < a.15.16.0026
Hpe Arubaos Switch	16.01.0000 ≤ version < 16.04.0027
Hpe Arubaos Switch	16.05.0000 ≤ version < 16.08.0027
Hpe Arubaos Switch	16.10.0001 ≤ version < 16.10.0024
Hpe Arubaos Switch	16.11.0001 ≤ version < 16.11.0013

Running on/with	Platform Versions
Arubanetworks Aruba 2530	All versions
Arubanetworks Aruba 2530ya	All versions
Arubanetworks Aruba 2530yb	All versions
Arubanetworks Aruba 2540	All versions
Arubanetworks Aruba 2920	All versions
Arubanetworks Aruba 2930f	All versions
Arubanetworks Aruba 2930m	All versions
Arubanetworks Aruba 3810m	All versions
Arubanetworks Aruba 5406r Zl2	All versions
Arubanetworks Aruba 5412r Zl2	All versions

References (2)

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt

Source: security-alert@hpe.com

Vendor Advisory

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.