An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
References
| Link | Resource |
|---|---|
| https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
26 Jul 2024, 13:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-78 | |
| References | () https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Arubanetworks edgeconnect Sd-wan Orchestrator
Arubanetworks |
|
| CPE | cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.3.0:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.0.0:*:*:*:*:*:*:* |
24 Jul 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-24 21:15
Updated : 2024-08-01 13:58
NVD link : CVE-2024-41136
Mitre link : CVE-2024-41136
JSON object : View
Products Affected
arubanetworks
- edgeconnect_sd-wan_orchestrator
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')