What’s Vulnerable › Vulnerabilities
CVE-2022-23691
- Severity: medium (CVSS 6.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-09-06 · updated 2026-06-17
Description
A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1030 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx: 10.06.0210 and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address this security vulnerability.
Affected products
- Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 S: from 10.06.0000 through 10.06.0210; from 10.08.0000 through 10.08.1070; from 10.09.0000 through 10.09.1030; from 10.10.0000 through 10.10.0002
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-012.txt
Get alerted when CVE-2022-23691 or the next vulnerability affects your stack