Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-38485

Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in the affected controller leading to complete system compromise.

Published

2023-09-06T18:15:08.480

Last Modified

2024-11-21T08:13:40.053

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System arubanetworks arubaos < 8.6.0.22 Yes
Operating System arubanetworks arubaos < 8.10.0.7 Yes
Operating System arubanetworks arubaos < 8.11.1.1 Yes
Operating System arubanetworks arubaos < 10.4.0.2 Yes
Hardware arubanetworks 9004 - No
Hardware arubanetworks 9004-lte - No
Hardware arubanetworks 9012 - No
Hardware arubanetworks 9240 - No
References