Known vulnerabilities in AOS-CX 8400 Switch Series

Known vulnerabilities in AOS-CX 8400 Switch Series

Vendor: Aruba Networks

Software: AOS-CX 8400 Switch Series

Software CPE: cpe:2.3:h:aruba_networks:aos-cx_8400_switch_series:*:*:*:*:*:*:*:*

Website:

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU73905 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-1168	CWE-78	Low	No	No	10.06.0240, 10.10.1030, 10.11.0001	21.03.2023	SB2023032155 SB2023032427
#VU66928 - Exposure of sensitive information to an unauthorized actor CVE-2022-23690	CWE-200	Low	No	No	-	01.09.2022	SB2022090141
#VU66924 - Improper input validation CVE-2022-23686	CWE-20	Medium	No	No	-	01.09.2022	SB2022090141
#VU66925 - Improper input validation CVE-2022-23687	CWE-20	Medium	No	No	-	01.09.2022	SB2022090141
#VU66926 - Improper input validation CVE-2022-23688	CWE-20	Medium	No	No	-	01.09.2022	SB2022090141
#VU66927 - Improper input validation CVE-2022-23689	CWE-20	Medium	No	No	-	01.09.2022	SB2022090141
#VU66923 - Permissions, Privileges, and Access Controls CVE-2022-23684	CWE-264	Medium	No	No	-	01.09.2022	SB2022090141
#VU66898 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-23683	CWE-78	Low	No	No	-	01.09.2022	SB2022090141
#VU66897 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-23682	CWE-78	Low	No	No	-	01.09.2022	SB2022090141
#VU66896 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-23681	CWE-78	Low	No	No	-	01.09.2022	SB2022090141
#VU66895 - Cross-Site Request Forgery (CSRF) CVE-2022-23680	CWE-352	Medium	No	No	-	01.09.2022	SB2022090141
#VU66894 - Cross-Site Request Forgery (CSRF) CVE-2022-23679	CWE-352	Medium	No	No	-	01.09.2022	SB2022090141