CVE-2023-22791
Published: May 8, 2023
Modified: Jan 31, 2025
CVSS v3.1
5.4
Description
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in which this disclosure of potentially sensitive information can occur are complex and depend on factors that are beyond the control of the attacker.
| Vendor | Product | Versions |
|---|---|---|
Hewlett Packard Enterprise (HPE) | Aruba Access Points running InstantOS and ArubaOS 10 | affected Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and belowaffected Aruba InstantOS 6.5.x: 6.5.4.23 and belowaffected Aruba InstantOS 8.6.x: 8.6.0.19 and belowaffected Aruba InstantOS 8.10.x: 8.10.0.4 and belowaffected ArubaOS 10.3.x: 10.3.1.0 and below+1 more versions |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now