CVE-2022-23677:

Remote code execution vulnerability (CVE-2022-23677) in ArubaOS-Switch devices affecting multiple 15.x and 16.x releases; Aruba has released upgrades to address these vulnerabilities.

Score
A numerical rating that indicates how dangerous this vulnerability is.

8.1High

Published Date:May 10, 2022
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:5.7
EPSS Percentile:90%

Exploitability

Score:2.2
Attack Vector:NETWORK
Attack Complexity:HIGH
Privileges Required:NONE
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

Remote code execution vulnerability (CVE-2022-23677) in ArubaOS-Switch devices affecting multiple 15.x and 16.x releases; Aruba has released upgrades to address these vulnerabilities.

Overview

ArubaOS-Switch devices are exposed to a remote code execution vulnerability that could allow an attacker to run arbitrary code on the device, potentially leading to full control of the device and disruption of network operations. The affected versions span a broad set of releases across 15.x and 16.x lines, including specific builds with lower-than-fixed numbers. Aruba has acknowledged this issue and published upgrades to mitigate the vulnerability, offering fixes in their ARUBA-PSA advisory.

Remediation

Identify all ArubaOS-Switch devices and confirm their software versions against the affected lists in ARUBA-PSA-2022-008.
Upgrade affected devices to ArubaOS-Switch fixed releases as documented in ARUBA-PSA-2022-008 (i.e., apply the vendor-released upgrades that address the vulnerability). Plan the upgrade during a maintenance window and ensure compatibility with your network topology.
Before upgrading, back up configurations and perform a test upgrade in a lab or staged environment if possible.
After upgrading, validate device functionality and monitor for any anomalies or indicators of compromise. Ensure security monitoring is enabled for suspicious activity post-upgrade.
If an immediate upgrade is not feasible, implement compensating controls to reduce exposure: restrict management plane access to trusted networks (use ACLs/firewalls, VPN/IPSEC, and management VLAN segmentation); disable or limit remote management interfaces from untrusted networks; enforce least privilege for administrative access.
Keep abreast of new advisories and apply subsequent patches as released by Aruba to maintain protection.