vulnerability

Aruba AOS-CX: CVE-2022-23691: Local Authentication Bypass Vulnerability in Recovery Console

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
2022-08-30
Added
2025-02-24
Modified
2025-04-03

Description

A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise.

Solution

aruba-aos-cx-cve-2022-23691
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.