← back
CVE-2023-35975

Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion

CVSS 6.5 MEDIUMEPSS 0.6%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.6%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
05 Jul 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →