CVE-2023-38486

Summary

CVE-2023-38486 is a newly discovered vulnerability affecting Aruba 9200 and 9000 Series Controllers and Gateways. This issue lies in the secure boot implementation, enabling attackers to bypass security controls and execute arbitrary runtime operating systems. Normally, unsigned kernel images are prohibited from running, but with this vulnerability, an attacker can execute unverified and unsigned OS images, posing a significant risk to network security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.