Description
An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute arbitrary commands as a privileged user on the underlying operating system.
CVSS breakdown
CVSS 3.1
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Hewlett Packard Enterprise (HPE) / AOS-CX10.18.0000 – 10.18.0001
- Hewlett Packard Enterprise (HPE) / AOS-CX10.17.0000 – 10.17.1021
- Hewlett Packard Enterprise (HPE) / AOS-CX10.16.0000 – 10.16.1051
- Hewlett Packard Enterprise (HPE) / AOS-CX10.13.0000 – 10.13.1180
- Hewlett Packard Enterprise (HPE) / AOS-CX10.10.0000 – 10.10.1180
- HPE / arubaos-cx10.10.1180
- HPE / arubaos-cx10.18.0001 – 10.18.0001
Updated 16m ago · 8 sources