Edgeconnect Enterprise
CVE-2023-30502
HIGH
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
AnalysisAI
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Affected products include: Arubanetworks Edgeconnect Enterprise.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Edgeconnect Enterprise
View allVulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit
A vulnerability exists in the API of Aruba EdgeConnect Enterprise. Rated high severity (CVSS 7.5), this vulnerability is
A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run ar
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today