CVE-2023-1168
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/03/2023
Last modified:
26/02/2025
Description
An authenticated remote code execution vulnerability<br />
exists in the AOS-CX Network Analytics Engine. Successful<br />
exploitation of this vulnerability results in the ability to<br />
execute arbitrary code as a privileged user on the underlying<br />
operating system, leading to a complete compromise of the<br />
switch running AOS-CX.<br />
<br />
<br />
Impact
Base Score 3.x
7.20
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* | 10.06.0000 (including) | 10.06.0240 (excluding) |
| cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* | 10.08.0000 (including) | 10.08.1070 (including) |
| cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* | 10.09.0000 (including) | 10.09.1020 (including) |
| cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* | 10.10.0000 (including) | 10.10.1030 (excluding) |
| cpe:2.3:h:hpe:aruba_cx_10000-48y6:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_6200f_48g:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_6200m_24g:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_6300m_24p:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_6300m_48g:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_6405:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_6410:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_8320-32:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_8320-48p:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_8325-32c:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:hpe:aruba_cx_8325-48y8c:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page