CVE Feed

    Dashboard / CVE / CVE-2023-22785

    CVE-2023-22785

    There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

    Published:May 8, 2023
    Last Modified:Jan 31, 2025
    EPS:May 8, 2023
    EPSS Score:0.00876
    CVSS Score:9.8

    Affected Products

    Vendor
    Hp
    Product
    Arubaos
    Vendor
    Hp
    Product
    Instantos

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-37179 (CVSS 5.3) — Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling cer…
    CVE-2025-37178 (CVSS 5.3) — Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling cer…
    CVE-2025-37177 (CVSS 6.5) — An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conduct…
    CVE-2025-37176 (CVSS 6.5) — A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header t…
    CVE-2025-37175 (CVSS 7.2) — Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors runnin…
    CVE-2025-37173 (CVSS 7.2) — An improper input handling vulnerability exists in the web-based management interface of mobility conductors r…
    CVE-2025-37169 (CVSS 7.2) — A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Succ…
    CVE-2025-37168 (CVSS 8.2) — Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running…
    CVE-2025-37125 (CVSS 7.5) — A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploit…
    CVE-2025-37123 (CVSS 8.8) — A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High