CVE-2023-38486
Published: Sep 6, 2023
Modified: Sep 26, 2024
CVSS v3.1
7.7
Description
A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass security controls which would normally prohibit unsigned kernel images from executing. An attacker can use this vulnerability to execute arbitrary runtime operating systems, including unverified and unsigned OS images.
| Vendor | Product | Versions |
|---|---|---|
Hewlett Packard Enterprise (HPE) | 9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways | affected ArubaOS 10.4.x.x - <= <=10.4.0.1affected ArubaOS 8.11.x.x - <= <=8.11.1.0affected ArubaOS 8.10.x.x - <= <=8.10.0.6affected ArubaOS 8.6.x.x - <= <=8.6.0.21 |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now