Approved changes feed: RSS · Atom

cpe:2.3:o:arubanetworks:aos-cx:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorArubanetworks (3287c295-e9c7-5718-acd2-a08960c91bf2)
ProductAos Cx (b362995f-a4dc-5db7-b60e-ffa9c4fa306b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23691 vulnerable 2026-06-08 05:40:58.209233 Details available
A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
Published: 2022-09-06T17:18:55.000Z
Updated: 2024-08-03T03:51:45.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23690 vulnerable 2026-06-08 05:40:58.208317 Details available
A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further exploitation in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1060 and below, AOS-CX 10.06.xxxx: 10.06.0200 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
Published: 2022-09-06T17:18:55.000Z
Updated: 2024-08-03T03:51:45.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23689 vulnerable 2026-06-08 05:40:58.207283 Details available
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
Published: 2022-09-06T17:18:55.000Z
Updated: 2025-06-17T19:29:06.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23688 vulnerable 2026-06-08 05:40:58.205946 Details available
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
Published: 2022-09-06T17:18:55.000Z
Updated: 2024-08-03T03:51:45.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23687 vulnerable 2026-06-08 05:40:58.204664 Details available
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches version(s): AOS-CX 10.09.xxxx: 10.09.1010 and below, AOS-CX 10.08.xxxx: 10.08.1050 and below, AOS-CX 10.06.xxxx: 10.06.0190 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities.
Published: 2022-09-06T17:18:54.000Z
Updated: 2024-08-03T03:51:45.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23686 vulnerable 2026-06-08 05:40:58.203620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23684 vulnerable 2026-06-08 05:40:58.201973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23683 vulnerable 2026-06-08 05:40:58.200903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23682 vulnerable 2026-06-08 05:40:58.199852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23681 vulnerable 2026-06-08 05:40:58.198480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23680 vulnerable 2026-06-08 05:40:58.195231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23679 vulnerable 2026-06-08 05:40:58.182689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.