CVE-2022-23676:

Remote code execution vulnerability in ArubaOS-Switch devices (CVE-2022-23676) that could allow an attacker to execute arbitrary code on affected devices.

Score
A numerical rating that indicates how dangerous this vulnerability is.

9.8Critical

Published Date:May 10, 2022
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:5.5
EPSS Percentile:90%

Exploitability

Score:3.9
Attack Vector:NETWORK
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

Remote code execution vulnerability in ArubaOS-Switch devices (CVE-2022-23676) that could allow an attacker to execute arbitrary code on affected devices.

Overview

This CVE describes a remote code execution vulnerability that affects a wide range of ArubaOS-Switch versions. The vulnerability enables an attacker to run arbitrary code on vulnerable devices, which could compromise device integrity and enable further exploitation of the network. Aruba has released upgraded firmware to address these vulnerabilities; affected customers should apply the provided fixes to mitigate risk across all affected platforms.

Remediation

Identify all ArubaOS-Switch devices in your environment and verify their firmware version against the affected list.
Review Aruba’s PSA ARUBA-PSA-2022-008 to determine the fixed firmware versions and upgrade paths for your hardware model.
Schedule and perform upgrades to the fixed versions in a maintenance window, ensuring configuration backups are created beforehand.
After upgrading, verify device health and functionality, and confirm that the vulnerability is mitigated.
If immediate upgrade is not possible for any device, implement compensating controls: restrict management access to trusted networks, apply strict access controls (ACLs/firewalls) to management interfaces, and monitor for related indicators of compromise.
Establish a timeline to bring all devices to the fixed versions and monitor Aruba advisories for any additional patched versions or guidance.