Cyber Resilience

CVE-2022-23676

Critical

Published: 10 May 2022

Published
10 May 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0553 90.5th percentile
Risk Priority 23 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-23676 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in Arubanetworks 5406R Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 9.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

Deeper analysis

A remote code execution vulnerability tracked as CVE-2022-23676 affects multiple releases of ArubaOS-Switch firmware on Aruba networking devices. The flaw, assigned CWE-787, exists in versions 15.xx.xxxx through 16.11.xxxx with specific builds below the listed thresholds, allowing an unauthenticated network attacker to trigger an out-of-bounds write condition.

An attacker with no credentials or user interaction can send specially crafted network traffic to an exposed management interface, achieving arbitrary code execution with full system privileges. The CVSS 9.8 score reflects the absence of required authentication and the complete confidentiality, integrity, and availability impact that follows successful exploitation.

Aruba’s advisory ARUBA-PSA-2022-008 states that firmware upgrades have been issued for all affected ArubaOS-Switch branches and recommends immediate installation of the fixed releases to eliminate the vulnerability. The EPSS score has remained low, with a current value of 0.0553 and a peak of 0.0630.

EU & UK References

Vulnerability details

A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx:…

more

All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.

CWE(s)
CWE-787

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

arubanetworks
5406r firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
3810m firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
2920 firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
2930f firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
2930m firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
2530 firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
2540 firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
5412r firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
2615 firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
arubanetworks
2620 firmware
15.00.0 — 15.16.0023 · 16.01.0 — 16.02.0034 · 16.03.0 — 16.04.0024
+1 more product configuration(s) — see NVD for full list

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SI-16 Memory Protection
addresses: CWE-787

Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.

References