Arubaos Switch
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise:arubaos-switch:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (cf91c099-7d18-57d8-9f3b-5c65b8b58b47) |
|---|---|
| Product | Arubaos Switch (57e9efec-a998-5519-b3fe-dfa1d5c515b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39268 |
vulnerable | 2026-06-08 06:09:36.196236 |
Memory Corruption Vulnerability in ArubaOS-Switch
MEDIUM (4.5)
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2023-08-29T19:38:58.346Z
Updated: 2024-09-27T19:51:59.087Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39267 |
vulnerable | 2026-06-08 06:09:36.194948 |
Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface
MEDIUM (6.6)
An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.
Published: 2023-08-29T19:28:55.315Z
Updated: 2024-09-27T19:54:56.961Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39266 |
vulnerable | 2026-06-08 06:09:36.180292 |
Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch
HIGH (8.3)
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Published: 2023-08-29T19:20:18.105Z
Updated: 2024-09-27T21:56:37.037Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.