← Back

CVE-2023-39268

nvd nist
Published: Aug 29, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Affected (5)

Products: Hpe: Arubaos Switch
Hpe
1 product
Arubaos Switch
Configuration A
5 vulnerable · 10 platform
Vulnerable SoftwareAffected Versions
Hpe
Arubaos Switch
Before a.15.16.0026
Arubaos Switch
From 16.01.0000 to 16.04.0027
Arubaos Switch
From 16.05.0000 to 16.08.0027
Arubaos Switch
From 16.10.0001 to 16.10.0024
Arubaos Switch
From 16.11.0001 to 16.11.0013
Running on/withPlatform Versions
Arubanetworks
Aruba 2530
All versions
Arubanetworks
Aruba 2530ya
All versions
Arubanetworks
Aruba 2530yb
All versions
Arubanetworks
Aruba 2540
All versions
Arubanetworks
Aruba 2920
All versions
Arubanetworks
Aruba 2930f
All versions
Arubanetworks
Aruba 2930m
All versions
Arubanetworks
Aruba 3810m
All versions
Arubanetworks
Aruba 5406r Zl2
All versions
Arubanetworks
Aruba 5412r Zl2
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: security-alert@hpe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.