CVE-2022-23688 Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX

AOS-CX 10.09.1010 is the latest software version in release 10.09. Aruba recommends users update to this version only after upgrading to a release 10.09 switch device. AOS-CX 10.08.1050 is the latest software version in release 10.08. Aruba recommends users update to this version only after upgrading to a release 10.08 switch device. AOS-CX 10.06.0190 is the latest software version in release 10.06. Aruba recommends users update to this version only after upgrading to a release 10.06 switch device. CVE-2018-9183 A remote attacker may be able to cause a Denial-of-Service condition by sending crafted packets to the AOS-CX LLDP service.

CVE-2018-9184 An attacker may be able to cause a Denial-of-Service condition by sending crafted packets to the AOS-CX LLDP service.

CVE-2018-9185 An attacker may be able to cause a Denial-of-Service condition by sending crafted packets to the AOS-CX LLDP service.

CVE-2018-9186 A remote attacker may be able to cause a Denial-of-Service condition by sending crafted packets to the AOS-CX LLDP service.

CVE-2018-9187 An attacker may be able to cause a Denial-of-Service

Coverage of these vulnerabilities

How do I find the version of my AOS-CX device?

AOS-CX Software version:
AOS-CX UI version:
Switch firmware version:
Control Web Server version:

AOS-CX Requirements

Timeline

Published on: 09/06/2022 18:15:00 UTC
Last modified on: 09/12/2022 14:24:00 UTC

Coverage of these vulnerabilities

How do I find the version of my AOS-CX device?

AOS-CX Requirements

Timeline

References