CVE-2023-22789

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1

8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-28)

CWE

CWE-77

Published

2023-05-08

Modified

2026-10-28

Record from

the NVD, synced 2026-10-28

Affected

• arubanetworks:arubaos
• hp:instantos

References

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt

Check your stackJSON